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DATA PROCESSING METHOD AND DATA READING METHOD 

FIELD OF THE INVENTION 
[0001] 

The present invention relates to a data processing method 
capable of preventing illegal use of data (digital contents) 
distributed/delivered to a user through a recording medium such 
as a CD and a DVD, an internet line, a telephone line or the 
like, to a data reading method for reading the data processed 
by this processing method, and to a recording medium in which 
programs implementing these methods are stored* 

BACKGROUND ART 
[0002] 

The following system has been proposed as this type of 
conventional example. The system comprises a recording medium 
for distribution such as CD-ROM on which encrypted digital 
contents are recorded, management means for managing charges 
in accordance with the use of the digital contents by a user, 
a digital contents reproducing device which is used when the 
digital contents are reproduced by the user who has acquired 
the recording medium for distribution, and which can be connected 
to the management means via an internet line. A basic 
configuration of the system is such that when an application 
for digital contents is inputted to the digital contents 



reproducing device by the user under the condition of 
authentication and billing, the digital contents reproducing 
device transmits the application to the management means via 
the internet line, and the management means, after confirming 
authentication and billing of the user relating to the relevant 
application, transmits a decryption key data to the digital 
contents reproducing device via the internet line, and the 
digital content reproducing device decrypts the digital contents 
on the recording medium for distribution by using the decryption 
key data to reproduce it (for example, refer to Patent Document 
1 or the like) , 
[0003] 

Patent Document 1: Japanese Published Unexamined 
Application No. 2002-334172. 
[0004] 

However, in the case of the above-mentioned conventional 
example, in the digital contents reproducing device, once the 
digital contents on the recording medium for distribution is 
decrypted, not only the reproduction but also copy can be 
performed easily, so that it has an essential drawback that 
secondary illegal use cannot be prevented. 
[0005] 

However, while the secondary illegal use can be prevented 
if there is addeda functionof automatically deleting the digital 
contents after a predetermined period of time from a reproduction 



application has passed, there arises another drawback that the 
collection of charges in accordance with the secondary use cannot 
be expected any longer. 
[0006] 

This problem is not specific to the case where digital 
contents are distributed to a user through a recording medium 
for distribution, but there is a similar problem in the case 
where the digital contents are delivered through an Internet 
line or the like. Namely, profits that a contents holder or 
the like should obtain under normal circumstances are illegally 
lost, and in this regard, the distribution of the digital contents 
is impeded from being promoted under the present situation. 
[0007] 

The present invention is created under the above-described 
background, and a first object of the present invention is to 
prevent illegal use of data (digital contents) and a second object 
is to provide a method for processing the data in which the 
collection of charges in accordance with secondary use of the ' 
data can be surely performed, a data reading method for reading 
the data processed by this processing method, and a recording 
medium on whichprograms implementing thesemethods are recorded. 

DISCLOSURE OF THE INVENTION 
[0008] 

In order to solve the above-described problems, a data 
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illegal use preventing method of the present invention is 
characterized in that, in a method for processing data in which 
the data is encrypted and decrypted on a basis of a decryption 
bit length, thereby being read, the data is encrypted, a part 
of this data with a bit length different from the decryption 
bit length is omitted, and the omitted part is closed so as to 
make the data continuous. 
[0009] 

Said data can be compressed before encryption. It is 
preferable that after said omitted part of the data is closed 
so as to make the data continuous, dummy data of the same bit 
length as that of the omitted data is added at the end of the 
data . 
[0010] 

the bit length of the omitted data is a bit length different 
from a devisor of the decryption bit length, 
[0011] 

In the case where the data is omitted at a plurality of 
positions, the bit length of the omitted data x the number of 
omission positions is a bit length different from the divisors 
of the decryption bit length. 
[0012] 

A method for reading data of the present invention is a 
method for reading data using a data reading device for reading 
the data processed by the processing data method according to 



claim 1 and recorded in advance on a recording medium or on an 
auxiliary storage section of the data reading device, and which 
is a system including electronic equipment having an auxiliary 
storage device for pre-recording the omitted data and location 
information indicating in which part of the data the omitted 
data is located and said data reading device connected to the 
electronic equipment via a communication line, characterized 
in that the data reading device send a request to the electronic 
equipment via the communication line for the omitted data 
relating to the data to read and its location information in 
accordance with operation inputs, and the electronic equipment 
transmits the omitted data and its location information 
simultaneously or sequentially in reply to the request, the data 
reading device receives the omitted data and its location 
information to record them on the auxiliary storage section, 
and thereafter, in order to sequentially transfer the data on 
the recording medium or on the auxiliary storage section to a 
main storage section and to sequentially decrypt the data on 
the main storage section on the decryption bit length basis and 
read it, the location information on the auxiliary storage 
section is transferred to the main storage section, with 
reference to the location information, the omitted part of said 
data is recognized, and the omitted data on the auxiliary storage 
section is transferred to the main storage section, while the 
data on the recording medium or on the auxiliary storage section 



is transferred to the main storage section and the omitted data 
is connected to the omitted part of the data on the main storage 
to decrypt the data on the decryption bit length basis. 
[0013] 

In the case where said data is encryptedbef ore compression, 
the data reading device send a request to the electronic equipment 
via the communication line for the omitted data relating to the 
data to read and its location information in accordance with 
operation inputs, and the electronic equipment transmits the 
omitted data and their location information simultaneously or 
sequentially in reply to the request; the data reading device 
receives the omitted data and its location information to record 
them on the auxiliary storage section; and thereafter, in order 
to sequentially transfer the data on the recording medium or 
on the auxiliary storage section to a main storage section, to 
sequentially decrypt the data on the main storage section on 
a decryption bit length basis, and to restore the data from a 
compressed state to an original state and read it, the location 
information on the auxiliary storage section is transferred to 
the main storage section, with reference to the location 
information, the omitted part of said data is recognized, and 
the omitted data on the auxiliary storage section is transferred 
to the main storage section, while the data on the recording 
medium or on the auxiliary storage section is transferred to 
the main storage section and the omitted data is connected to 
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the omitted part of the data on the main storage to decrypt the 
data on the decryption bit length basis and restore the data 
from the compressed state to the original state. 

[0014] 

Said electronic equipment can be management means for 
managing the use of the data by the transmission of the omitted 
data and the location information. 
[0015] 

The data recorded on the recording mediiim or on the 
auxiliary storage section of the data reading device is recorded 
in advance on said auxiliary storage device of the electronic 
equipment or on another auxiliary storage device, and is 
transmitted from the electronic equipment in accordance with 
the request of the data reading device to the electronic equipment 
via the communication line., and is recorded on the auxiliary 
storage section of said data reading device. 
[0016] 

In the case where said data is permitted to be read for 
a predetermined period, it is preferable that the data reading 
device obtains an elapsed period from a point of time when the 
omitted data is received, and when the relevant elapsed period 
reaches the predeterminedperiod, the daita reading device deletes 
at least the omitted data on the auxiliary storage section. 
[0017] 

It is also possible that the data reading device obtains 



an elapsed period from a point of time when the data is received, 
separately from the omitt.ed data, and when the relevant elapsed 
period reaches a predetermined period, the data reading device 
deletes the data on the auxiliary storage section. 

EFFECT OF THE INVENTION 
[0018] 

In the case of the method for processing data according 
to claim 1 of the present invention, the data is encrypted, part 
of the data with the bit length different from the decryption 
bit length thereof is omitted, and the omitted part is closed 
so as to make the data continuous, so that a data row of the 
data after the omitted part becomes different from a data row 
when it was encrypted (that is, data row before omission) . 
Consequently, in reading the data by the data reading device, 
when the part of the data after the omitted part is sequentially 
transferred to the main storage section and the data on the main 
storage section is sequentially decrypted by the decryption bit 
length, the data row of the data is different from the data row 
when it was encrypted, so that the data row does not return to 
the original data row before the encryption but is converted 
into an unknown sequence of numbers or alphanumerics • As a result, 
the data after the omittedpart cannot be read, thereby preventing 
the illegal use of the data. 
[0019] 
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In the case of the method for processing data according 
to claim 2 of the present invention, the data is encrypted before 
compression. Such data is transferred to the main storage 
section of the data reading device, is decrypted by the decryption 
bit length, and is restored from the compressed state to the 
original state. Since the part of the data after the omitted 
part is converted into an unknown sequence of numbers or 
alphanumerics when decrypted, if an attempt is made to restore 
this unknown sequence of numbers or alphanumerics from the 
compressed state to the original state , the restoring process 
of the data by the data reading device will stop. Therefore, 
there are advantages for preventing the illegal use of the data. 
[0020] 

In the case of the method for processing data according 
to claim 3 of the present invention, after the omitted part of 
said data the omitted part is closed so as to make the data 
continuous, dummy data of the same bit length as that of the 
omitted data is added at the end of the data. Specifically, 
the data length remains the same before and after the omission. 
Thereby, a third person will not know whether or not said data 
is partially omitted. Therefore, there are advantages for 
preventing the illegal use of the data. 
[0021] 

In the case of the method for processing data according 
to claim 4 of the present invention, the bit length of the omitted 



data is a bit length different from a devisor of the decryption 
bit length. If the bit length of the omitted data is a divisor 
of the decryption bit length, the data row of the data after 
the omitted part which is transferred to the main storage section 
of the data reading device becomes the same as the data row when 
it was encrypted (that is, the data row before omission) , so 
that the data other than the omitted part can be read. This 
can be prevented by the above-mentioned method. 
[0022] 

In the case of the method for processing data according 
to claim 5 of the present invention, a product of the bit length 
of the omitted data and the number of omissions is a bit length 
different from the divisor of the decryption bit length. 
Therefore, if the product of the bit length of the omitted data 
and the number of omissions is a divisor of the decryption bit 
length, the data row of the data after the omitted part which 
is transferred to the main storage section of the data reading 
device becomes the same as the data row when it was encrypted 

(that is, the data row before omission) , so that the data other 
than the omitted part can be read. This can be prevented by 
the above-mentioned method. 

[0023] 

In the case of the method for reading data according to 
claim 6 of the present invention, the data reading device requests 
the omitted data and its location information which are recorded 
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on the auxiliary storage device of the electronic equipment and 
records them on the auxiliary storage section of the data reading 
device, and thereafter, in order that the data reading device 
reads the data on the recording medium or on the auxiliary storage 
section, with reference to said location information, the omitted 
part of the data is recognized, the omitted data on the auxiliary 
storage section and the data on the recording medium or on the 
auxiliary storage section are transferred to the main storage 
section, the omitted data is connected to the omitted part of 
the data, and the data on the main storage section is decrypted 
by the decryption bit length and is read. Thus, by connecting 
the omitted data to the omitted part of the data, the data row 
in the vicinity of the omitted part is returned to the data row 
when it was encrypted. Therefore, when the data in the vicinity 
of the omitted part is decrypted, since it is not converted into 
an unknown sequence of numbers or alphanumerics, the data can 
be read. Namely, unless a user obtains the omitted data which 
is omitted as an authentic user, he cannot read the data, so 
that the illegal use of the data can be prevented. In addition, 
even if data recorded on the recording medium is simply copied, 
the user is required to obtain the omitted data as an authentic 
user to read the relevant data. Therefore, the collection of 
charges in accordance with secondary and tertiary use can be 
ensured. 
[0024] 
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In the case of the method for reading data according to 
claim 7 of the present invention, the data reading device requests 
the omitted data and its location information which are recorded 
on the auxiliary storage device of the electronic equipment and 
records them on the auxiliary storage section of the data reading 
device, and thereafter, in order that the data reading device 
reads the data on the recording medium or on the auxiliary storage 
section, withreference to said location information, the omitted 
part of the data is recognized, the omitted data on the auxiliary 
storage section and the data on the recording medium or on the 
auxiliary storage section are transferred to the main storage 
section, the omitted data is connected to the omitted part of 
the relevant data, the data on the main storage section is 
decrypted by the decryption bit length, and the relevant data 
is restored from the compressed state to the original state and 
is read. Thus, by connecting the omitted data to the omitted 
part of the data, the data row in the vicinity of the omitted 
part is returned to the data row when it was encrypted . Therefore, 
when the data in the vicinity of the omitted part is decrypted, 
since it is not converted into an unknown sequence of numbers 
or alphanumerics, the restoring process does not stop and the 
data can be read. Namely, unless a user obtains the omitted 
data which is omitted as an authentic user, he cannot read the 
data, so that the illegal use of the data can be prevented- In 
addition, even if data recorded on the recording medium is simply 



copied, the user is required to obtain the omitted data as an 
authentic user to read the relevant data. Therefore, the 
collection of charges in accordance with secondary and tertiary 
use can be ensured. 
[0025] 

In the case of the method for reading data according to 
claim 8 of the present invention, said electronic equipment is 
management means for managing the use of the data by the 
transmission of the omitted data and the location information. 
Therefore, the invention enables billing or other processes in 
accordance with the use of the data. 
[0026] 

In the case of the method for reading data according to 
claim 9 of the present invention, the data recorded on the 
recording medium or on the auxiliary storage section of the data 
reading device is recorded in advance on said auxiliary storage 
device of the electronic equipment or on another auxiliary 
storage device, and is transmitted from the electronic equipment 
in accordance with the request of the data reading device to 
the electronic equipment via the communication line, and is 
recorded on the recording medium or on the auxiliary storage 
section of said data reading device. Therefore, the data is 
easily made available. 
[0027] 

In the case of the method for reading data according to 



claim 1 0 of the present invention, the data reading device obtains 
an elapsed period from a point of time when the omitted data 
is received, and when the elapsed period reaches a predetermined 
period, the data reading device deletes the transmitted omitted 
data. Consequently, the illegal secondary use of the data can 
be prevented. 
[0028] 

In the case of the method for reading data according to 
claim 1 1 of the present invention, the data reading device obtains 
an elapsed period from a point of time when the data is received, 
separately from the omitted data, and when the relevant elapsed 
period reaches a predetermined period, the data reading device 
deletes the transmitted data, so that the data does not remain 
in the data reading device for a longer period than the 
predetermined period. Therefore, there are advantages for . 
preventing the copy of the data for an illegal purpose. 
[0029] 

The recording medium according to claim 12 of the present 
invention enables similar effects to those of claims 1 to 5. 
The recording medium according to claim 13 of the present 
invention enables similar effects to those of claims 6 to 11. 

BRIEF DESCRITPION OF THE DRAWINGS 

[0030] 

Fig. 1 is a diagram for explaining a first embodiment of 



14 



the present invention, which is a configuration diagram of a 
digital contents illegal use preventing system, including a 
configuration diagram of a device for creating a recording medium 
for distribution used in this system. 

Fig. 2 is a flowchart of reproduction software used for 
this system. 

Fig. 3 is a flowchart of an interruption program for user 
registration which is processed by a control section in a 
management center of this system. 

Fig. 4 is a flowchart of an interruption program for piece 
data delivery which is processed by the control section in the 
management center of this system. 

Fig. 5 is a flowchart of a recording medium creating 
software executed by a computer which is the device for creating 
a recording medium for distribution used for this system. 

Fig. 6 is a configuration diagram of a digital contents 
illegal use preventing system according to a second embodiment 
of the present invention. 

Fig. 7 is a flowchart of reproduction software used for 
this system. 

Fig. 8 is a flowchart of an interruption program for user 
registration which is processed by a control section in a delivery 
management center of this system. 

Fig. 9 shows an interruption program for piece data 
delivery which is processedby the control section in the delivery 
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management center of this system. 

Fig. 10 is a configuration diagram of a digital contents 
illegal use preventing system according to a third embodiment 
of the present invention. 

Fig. 11 is a flowchart of reproduction software used for 
the digital contents illegal use preventing system. 

Fig. 12 is a flowchart of an interruption program for 
contents download. 

Fig. 13 is a configuration diagram of a digital contents 
illegal use preventing system according to a fourth embodiment 
of the present invention. 

Fig. 14 is a flowchart of reproduction software used for 
this system. 

Fig. 15 is diagrams showing a contents file of this system. 
Fig. ISA being an image diagram of a data body and Fig. 15B being 
an image diagram of a part a of the data body. 

Fig. 16 is a flowchart of recording medium creating f 
software executed by a computer which is a device for creating 
a recording medium for distribution used in this system. 

Fig. 17 is a configuration diagram of a digital contents 
illegal use preventing system according to a fifth embodiment 
of the present invention. 

Fig. 18 is a flowchart of reproduction software used for 
this system. 
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DESCRITPION OF REFERENCE NUMERALS 
[0031] 

a recording itiediiom for distribution 

100 digital contents illegal use preventing system 

101 management center 

120 digital contents reproducing device 
14 0 device for creating a recording medium for 
distribution 

200, 300 digital contents illegal use preventing 
system 

210, 310 delivery management center 

220, 320 digital contents reproducing device 

400 digital contents illegal use preventing system 

410 management center 

420 digital contents reproducing device 

500 digital contents illegal use preventing system 

510 delivery management center 

520 digital contents reproducing device 

BEST MODE FOR CARRYING OUT THE INVENTION 
[0032] 

Hereinafter, tlie embodiments of the present invention are 
described. 

Embodiment 1 
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[0033] 

A first embodiment of the present invention is first 
described with reference to Figs. 1 and 2. Fig. 1 is a 
configuration diagram of a digital contents illegal use 
preventing system as shown in Fig. 1, including a configuration 
diagram of a device for creating a recording medium for 
distribution used for this system. Fig. 2 is a flowchart of 
reproduction software used for this system. Fig. 3 is a flowchart 
of an interruption program for user registration which is 
processed by a control section in a management center of this 
system, and Fig. 4 is a flowchart of an interruption program 
for piece data delivery which is processed by the control section 
in this management center. 
[0034] 

A digital contents illegal use preventing system 100 as 
shown in Fig. 1 is a system preventing a contents file on a 

recording medium for distribution a which has been distributed 
to a user for a rental purpose from being used illegally. The 
object of rental is the contents file, not the recording medium 
for distribution a itself. 
[0035] 

This system has a basic structure comprising the recording 
medium for distribution a on which a contents file having header 
information a and a data body b is recorded with part of the 
data body b (omitted data) omitted, a management center 110 
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(electronic equipment) which is management means for managing 
the utilization of the contents file on the recording medium 

for distribution a, in which piece data d consisting of the omitted 
data and location information indicating in which part of the 
data body b the relevant omitted data is located is prepared 
in advance, and which can deliver the relevant piece data d via 
a communication line P, and a digital contents reproducing device. 
120 (data reading device) which is a device used when the contents 
file on the recording medium for distribution a is reproduced 
and copied, having a function of intercommunicating with the 

management center 110 via the communication line p. 
[0036] 

The communication line P is a wired or wireless internet 
line such as a digital line including an optical communication 
line or analog line including a telephone line, or a line 
transmitting/receiving an electric wave signal such as digital 
broadcasting or satellite broadcasting, and this is used to 
perform intercommunication between the management center 110 
and the digital contents reproducing device 120. 
[0037] 

The recording medium for distribution a is a general 
recording medium such as CD and DVD. The contents file on the 
recording medium for distribution a has the data body b (data) 
which is data of music, moving image, static image, text, game, 
software or the liJce, and the header information a containing 

19 



reproduction information for reproducing this data body b, and 
contents information such as a contents ID assigned to this data 
body b and a WEB address information of the management center 
110, and after the header information a and the data body b are 
encrypted, respectively, the contents file obtains a data 
structure in which part of the relevant data body b is omitted. 
At the beginning of the data body b, starting location information 
indicating a starting location of the relevant data body b is 
recorded. The location information indicating in which part 
of the data body b the omitted data is located is a data length 
or a time from the starting location information to the omitted 
part. Reproduction information is an address value to be read 
first or the like. 
[0038] 

The management center 110 is a server operated by a person 
doing a business in which the data body b on the recording medium 

for distributionais rented to a user and a rental fee is collected 
from the user under an agreement between the user and an owner 
of copyright or the like of a copyrighted work contained in the 
data body b. In the figure, reference numeral 111 denotes a 
piece data DB (an auxiliary memory device) on which the piece 
data d and a decryption key c2 necessary for decrypting the data 
body b of the contents file are recorded in advance, reference 
numeral 112 denotes a control section such as a computer, 
reference niomeral 113 denotes a communication section for 
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performing communication, reference niimeral 114 denotes a user 
information DB on which user information is recorded and 
information such as authentication and accounting based on the 
user information is recorded sequentially, reference numeral 
115 denotes a software DB on which the reproduction software 
and a decryption key cl necessary for decrypting the header 
information a of the contents file are recorded in advance, and 
reference numeral 116 denotes a memory section such as a hard 
disk. 
[0039] 

On the memory section 116, in addition to basic programs 
such as an operation system as a server, an interruption program 
for user registration as shown in Fig. 3, an interruption program 
for reproduction software download not shown in the figure, an 
interruption program for piece data delivery as shown in Fig. 
4 and the like are recorded. The contents of these programs 
will be described later. By processing these programs in the 
control section 112, this server exerts a function as the 
management center 110. Furthermore, on the memory section 116, 
data necessary for user registration processing and data 
necessary for reproduction application processing are recorded. 
[0040] 

The contents ID indicating the corresponding contents file 
is added to the piece data d on the piece data DB 111. Thus, 
by using the contents ID, a correspondence relationship between 
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the contents file on the recording medium for distribution a 
and the piece data d on the piece data DB 111 coincides . Similarly, 
a user ID and a player ID of a corresponding user are added to 
the user information on the user information DB 114. Thus, by 
using the user ID or the player ID, a correspondence relationship 
between the user and the user information in the user information 
DB 114 coincides. 
[0041] 

Since this management center 110 confirms (namely, 
authenticates) the user ID and a password and in addition, 
confirms whether or not the player ID coincides before 
transmitting the piece data d to the digital contents reproducing 
device 120, the player ID is also useful for preventing illegal 
use . 
[0042] 

The digital contents reproducing device 120 is a 
general-purpose computer used by the user. In the figure, 
reference numeral 121 denotes a control section such as CPU, 
reference numeral 122 denote an output section such as a monitor 
and a speaker, reference numeral 123 denotes an operation section 
such as a Iceyboard and a mouse, reference numeral 124 denotes 
a reproduction and copy section reading/writing the data with 
respect to the recording medium for distribution a and the like, 
and reference numeral 125 denotes a memory section (auxiliary 
storage section) such as a hard disk, and reference numeral 12 6 
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denotes a communication section for performing communication. 
[0043] 

On the memory section 125, in addition to basic programs 
such as an operation system as a computer, the reproduction 
software as shown in Fig. 2 is recorded. This reproduction 
software is chargeable or free software downloaded through the 
communication line p from the management center 110 under the 
condition of user registration, and application software 
necessary for reproducing the contents file on the recording 

medium for distribution a. Furthermore, the player ID assigned 
to the reproduction software is transmitted from the management 
center 110 to the memory section 125 together with the relevant 
reproduction software to be stored. Further, on the memory 
section 125, the piece data d, the decryption keys cl, c2 and 
the like which have been transmitted from the management center 
110 are recorded, and rental information indicating a rental 
period and the like are recorded. 
[0044] 

The contents of the reproduction software will be described 
later. The processing of this software by the control section 
121 allows this computer to exert the function as the digital 
contents reproducing device 120. 
[0045] 

The operation of the digital contents illegal use 
preventing system 100 configured as described above is described 
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and in conjunction of this, the operation of the management center 
110, the operation of the digital contents reproducing device 
120, and the contents of the respective programs are described. 
[0046] 

The user operates the operation section 123 of his or her ' 
own computer (computer equivalent to the digital contents 
reproducing device 120, which is in a state that the reproduction 
software as shown in Fig. 2 is not downloaded) to access the 

management center 110 via the communication line (3 and to request 

user registration. The management center 110 processes the 

interruption program for user registration as shown in Fig. 3 

in accordance with this request, and transmits the data necessary 

for the user registration to the computer (s21) . Thereafter, 

the user inputs his or her name, address and payment condition, 

^^a bank account number or a credit card number of his or hers, ' 

etc.'' as displayed in a user registration screen through the 

operation section 123 of the computer and transmits this 

registration data to the management center 110 via the 

communication line p. Then, the management center 110 creates 

a user ID and a password in accordance with this to register 

the relevant user ID and the like in the user information DB 

114 together with the registration data as user information (s22) . 

On the other hand, the relevant user ID and the password are 

transmitted to the computer of the user via the communication 

line P (s23) . Then, the processing of the interruption program ; 
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for user registration is finished. The user ID and the password 
may be inputted by the user himself or herself at the time of 
user registration. 
[0047] 

Thereafter, the user operates his or her computer to access 
the management center 110 and inputs a request for the download 
of the reproduction software. At this time, the user ID and 
the password are required. Then, the computer of the user 
transmits the request to the management center 110 via the 

communication line (3. The management center 110 processes the 
interruption program for reproduction software download in 
accordance with this request, reads out the reproduction software 
and the decryption key cl on the software DB 115, and transmits 
them to the computer of the user via the communication line p. 
Then, the reproduction software as shown in Fig. 2 is downloaded 
to the memory section 125 of the computer and installed. At 
the same time, the decryption key cl is recorded, on the memory 
section 125. This makes the computer into the digital contents 
reproducing device 120. 
[0048] 

When the recording medium for distribution a is set in 
the reproduction and copy section 12 4 by the user and the execution 
of the reproduction software is operated, this digital contents 
reproducing device 120 processes the relevant reproduction 
software, and outputs and displays data of a play list showing 
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a reproducing player and rented contents contained in the 
relevant reproduction software on the output section 122 . Then, 
the play list is displayed on a screen of the relevant reproducing 
player (si) • Namely, the contents file having a predetermined 
flag hoisted, which indicates that a reproduction application 
has been made, is displayed on the play list. Then, based on 
this play list, whether or not reproducing operation has been 
performed is determined through the operation section 123 (s2) . 
[0049] 

If it is determined that the reproducing operation has 
not been performed, then it is determined whether or not reading 

operation (operation of DISC LOAD) of the recording medium for 

'I 

distribution a has been performed through the operation section 
123 (s3) . If the operation of DISC LOAD is performed, then a 
contents list showing a contents file for which reproduction 
application has not been made is outputted and displayed on the 
output section 122 (s4) . Namely, while the decryption key cl 
on the memory section 125 is read out, the header information 
a of a contents file with the predetermined flag not hoisted 
among the contents files on the recording medium for distribution 
a is read out and decrypted by using the relevant decryption 
key cl to read out contents information contained in the relevant 
header information a and to display it on the contents list. 
[0050] 

Thereafter, when an application for reproduction of the 
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contents file on the contents list is performed by the user, 
the decryption key cl on the memory section 125 is read out and 
meanwhile, the header information a of the contents file on the 
recording medium for distribution a is read out and decrypted 
by using the relevant decryption key cl to read out the contents 
information contained in the relevant header information a. 
Then, based on a WEB address contained in the relevant contents 
information, the contents ID contained in the relevant contents 
information is transmitted to the management center 110 via the 
communication line p. In this manner, the execution of the 
reproduction application processing is transmitted, 
[0051] 

The management center 110 processes the interruption 
program for piece data delivery as shown in Fig. 4. Then, "it 
reads out the data necessary for the reproduction application 
processing from the memory section 116 and transmits it to the 
digital contents reproducing device 120 via the communication 
line P {s31) . Based on this data, the digital contents 
reproducing device 120 outputs and displays a reproduction 
application screen on the output section 122 (s5) . 
[0052] 

Thereafter, when the user sequentially inputs or selects 
a rental period through the operation section 123 as displayed 
on the reproduction application screen (this determines a rental 
amount of money) , and finally inputs the user ID and the password 
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through the operation section 123 as a reproduction application 
of the recording medium for distribution a (s6) , the digital 
contents reproducing device 120 shifts the display output of 
the output section 122 to an authentication screen, while the 
inputted application data is transmitted to the management center 
110 via the communication line p. At this time, the contents 
ID contained in the contents information of the header 

information a on the recording medium for distribution a and 
the player IDon thememory section 125 are readout and transmitted 
to the management center 110 together with the application data 

(s7) . 

[0053] 

The management center 110 confirms the authentication of 
the user relating to the application {s32). Namely, with 
reference to the transmitted user ID and player ID of the user 
etc. , the user information of the relevant user is read out from 
the user information DB 114, and whether or not the relevant 
user is an authentic user is confirmed. At this time, the 
management center 110 has in advance prepared a list of 
inappropriate persons with nonpayments of rental fee more than 
or equal to predetermined times or the like in the user information 
DB 114, and in addition to the authentication, confirms whether 
or not the user falls under the list of inappropriate persons 
(this confirmation of the list of inappropriate persons is 
arbitrary) . 
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[0054] 

In the case where the management center 110 has confirmed 
that the user relating to the application is an unauthentic user 
or an authentic user but a person who falls under the list of 
inappropriate persons, the rejection of the application of the 
user is transmitted to the digital contents reproducing device / 
120 via the communication line P (s33) . Then, the interruption 
program for piece data delivery is finished. 
[0055] 

On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the player ID of the user or the like, 
accounting is recorded on the user information of the user on 
the user information DB 114, while with reference to the contents 
ID, the piece data DB 111 is searched to read out the decryption 
Icey c2 and the piece data d corresponding to the relevant contents 
ID, and to transmit them to the digital contents reproducing 
device 120 as a reply indicating that the application of the 
user is accepted together with the rental information indicating 
the rental period and the lilce which are contained in the 
application data via the communication line P (s34) , Then, the 
processing of the interrupt program for piece data delivery is 
finished. 
[0056] 
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The charges are summed up based on the user information 
DB 114 for every predetermined period, and is charged to a bank/a 
credit card company 130 or charged directly to the user, so that 
the user transfers the charge to an account or pays it in a 
convenience store or the like. Furthermore, in the case where 
the management center 110 is connected to the bank/credit card 
company 130 via the communication line P, it is obviously possible 
to immediately settle accounts, too. 
[0057] 

Thereafter, upon receiving the rejection of the 
application of the user via the communication line P (s8) , the 
digital contents reproducing device 120 outputs and displays, 
an error message on the output section 122 (s9) . On the other 
hand, when the piece data d and the like are received via the 
communication line P (s8) , the predetermined flag is hoisted, 
while the decryption key c2, the piece data d and the rental 
information are recorded on the memory section 125 (slO) . At 
the same time, by using a clock function of the computer, a piece 
data transmission date and time is recorded on the memory section 
125. Then, the play list is updated, and outputted and displayed 
on the output section 122, so that a file name of the contents 
file with the piece data d obtained is displayed on the relevant 
play list (si) . 
[0058] 

Thereafter, when the reproducing operation of the contents 
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file is performed based on the play list through the operation 
section 123 (s2), the digital contents reproducing device 120 
reads out the decryption key cl on the memory section 125, and 
meanwhile, it reads out the header information a relating to 
the relevant contents file on the recording medium for 
distribution a and decrypts the header information a by using 
the decryption key cl . Then, the data body b on the recording 
medium for distribution a is read out by using the reproduction 
information contained in the relevant header information a and 
is reproduced while being decrypted with the decryption key c2 
on the memory section 125 (sll) . In addition, while the starting 
location information of the data body b on the recording medium 
for distribution a is read out, the piece data d on the memory 
section 125 is read out and the counting of a data length or 
a time from the starting location information to the location 
information contained in the piece data d is started (sl2) . 
Thereafter, whether or not the counting is finished is determined 
(sl3) . Thereby, the omittedpart of the data body b is recognized. 
As a result of this determination, when it is determined that 
the counting is finished and the omitted part of the data body 
b is recognized, the piece data d on the memory section 125 is 
read out and the omitted data contained in the relevant piece 
data d is read out as the data of the omitted part of the relevant 
data body b and is reproduced while being decrypted with the 
decryption key c2 on the memory section 125 (sl4) . Then, the 
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data body b on the recording medium for distribution a is read 
out again and is subsequently reproduced while being decrypted 
with the decryption key c2 on the memory section 125 (sl5) . This 
reproduction software program is finished upon end processing 
by the user. 
[0059] 

Furthermore, the reproduction software, in addition to 
the above-described basic function, has a piece data management 
function which is resident in the digital contents reproducing 
device 120 to manage the piece data d when the digital contents 
reproducing device 12 0 is turned ON. This piece data management 
function manages the piece data d on the memory section 125, - 
while it obtains a difference between a piece data transmission 
data and time and a current date and time as an elapsed period 
from a time point. when the piece data d is transmitted, and when 
this reaches the rental period contained in the rental 
information, it is determined to be outside of the rental period, 
and the piece data d and the decryption key c2 on the memory 
section 125 are deleted, while the predetermined flag is hauled 
down . 
[0060] 

Thus, in this system 100, even when the user operates to 
reproduce the recording medium for distribution a by using the 
digital contents reproducing device 120, the data body b of the 
contents file on the recording medium for distribution a cannot 
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be reproduced unless the user obtains the piece data d from the 
management center 110 as an authentic reproduction applicant. 
In this manner, the temporary, illegal use of the contents file 
on the recording medium for distribution a can be prevented. 
In addition, with respect to the contents file whose rental period 
has passed, the piece data d is deleted, which can prevent 
secondary illegal use. Furthermore, even if the recording. 

medium for distribution a is copied to another recording mediiam 
for distribution by the user, since in the contents file recorded 
on the another recording medium for distribution, the 
reproduction information contained in the header information 
a is omitted, the contents file cannot be reproduced unless the 
user obtains the piece data d as an authentic reproduction user. 
Therefore, tertiary, illegal use can also be prevented. 
[0061] 

Furthermore, outside of the rental period of the recording 
medium for distribution a, only the piece data d or the like 
on the memory section 125 is deleted automatically, and the 

contents file on the recording medium for distribution a remains 
as it is. Thus, the contents file can be created by copying 
the recording medium for distribution a to a new recording medium, 
using the digital contents reproducing device 120. In order 
to reproduce such a contents file on the recording medium for 

distribution a, authentication to the management center 110 and 
payment of rental fee by using the digital contents reproducing 
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device 120 are required, so that the collection of charges in 
accordance with the secondary and tertiary use can be ensured. 
[0062] 

In addition, since the charge relating to the contents 
file data body b is designed to be collected in the reproduction 
application separately from the recording medium for 
distribution a, it is also possible that the recording medium 
for distribution a is distributed for free and thereafter, the 
billing is performed to an applicant for reproduction. 
Alternatively, it is also possible that the recording medium 
for distribution a is sold only at an amount of money relating 
to this and thereafter, the billing is performed with respect 
to an applicant for reproduction . Furthermore, in the case where 
the contents of the contents file recorded on the recordingmedium 

for distribution a are those of a specialized book such as a 
medical book, the contents of the specialized book such as the 
medical book are divided item by item and each item is recorded 
as one contents file on the recording medium for distribution 

a, which allows reproduction application for each item. This 
makes it possible to always have an even expensive specialized 
book ready at home and refer to it by applying for reproduction 

(on a rental basis) for each item as necessary. By using this 
system in this manner, various novel business forms can be 
addressed. 

[0063] 



Furthermore, in the case where a plurality of contents 
files are recorded on the recording mediiam for distribution a, 
from the standpoint of the user, only the contents file which 
he or she wants to listen to or view can be rented. On the other 
hand/ from the standpoint of a creator of the recording medium 
for distribution cl, since the recording medium for distribution 
a can be made into the one on which arbitrary contents files 
are recorded without considering the taste of each user, fashion 
or the like, creation costs of the relevant recording medium 
for distribution a can be reduced. 
[0064] 

Here, a description of a device for creating a recording 
medium for distribution 140 which is used to create the recording 
medium for distribution a is given with reference to Figs. 1 
and 5. Fig. 5 is a flowchart of a recording medium creating 
software executed by a computer which is a device for creating 
a recording medium for distribution used for this system. 
[0065] 

The device for creating a recordingmedium for distribution 
140 is a device used by a proprietor of the management center 
110 or a person concerned with the same, and has a configuration 
in which part of the relevant data body b is separated from a 
contents file having the header information a and the data body 
b, and the relevant omitted data and the location information 
thereof are recorded as the piece data d, while the contents 

35 



file with the piece data d separated is recorded on the set 
recording medium to create the recording medium for distribution 

a. Here, a computer is used. 
[0066] 

In Fig. 1, reference numeral 141 denotes an input section 
reading out digital contents from a master disk, reference 
numeral 142 denotes a control section such as CPU which processes 
the recording mediiam creating software shown in Fig. 5, reference 
numeral 143 denotes a recording section in which a recording 
medium such as CD and DVD can be set and which records a contents 
file on the recording medium, reference numeral 144 denotes a 
piece data memory recording the piece data d separated from the 
contents file, and reference numeral 145 denotes amemory section 
such as a hard disk on which the recording medium creating software 
is recorded. 
[0067] 

Hereinafter, the contents of the recording medium creating 
software shown in Fig. 5 are described, and in addition, the 
operation of the device for creating a recording medium for 
distribution 140 is described. 
[0068] 

The device for creating a recording medium for distribution 
140, upon being turning On, processes the recording medium 
creating software on the memory section 145. Then, the master 
disk is set manually or automatically in the input section 141. 

36 



Furthermore, a recording medium such as DVD is sequentially set 

in the recording section 143. 

[0069] 

The contents file is read out from the master disk set ' 
by the input section 141 (si) , and the header information a and 
the data body b of the relevant contents file are encrypted, 
respectively (s2) . Thereafter, part of the data body b contained 
in the contents file is separated, and the relevant separated 
omitted data is recorded on the piece data memory 144 as the 
piece data d together with its location information (s3) . 
Meanwhile, the relevant contents file is recorded on the 
recording medium such as DVD which is set in the recording section 
143 (s4) . This finishes the software . The piece data d recorded 
on the piece data memory 144 is transferred to the management ' 
center 110 via the communication line p. In such a manner, the 
recording medium for distribution a is created. The piece data 
d can be recorded on the piece data memory 144 can also be recorded 
on the recording medium and sent to the management center 110. 
[0070] 

The digital contents illegal use preventing system 100 
as described above may be subject to any design modification 
as long as it comprises a recording medium for distribution on 
which a contents file having header information and a data body 
is recorded with part of the data body omitted, management means 
which is means for managing the utilization of the contents file 
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on the recording medium for distribution, has a database on which 
the omitted data and location information indicating in which 
part of the data body the omitted data is located are recorded 
and can transmit the relevant omitted data and its location 
information via a communication line, and a digital contents 
reproducing device which is used at least in reproducing the 
contents file on the recording medium for distribution and has 
a function capable of intercommunication with the management 
means via the communication line, wherein when an application 
for reproduction of the contents file is inputted to the digital 
contents reproducing device by a user, the digital contents 
reproducing device transmits the relevant application to the 
management means via the communication line, and the management 
means transmits the omitted data and its location information 
of the contents file relating to the relevant application 
simultaneously or subsequently to the relevant digital contents 
reproducing device via the communication line, and the digital 
contents reproducing device receives the relevant omitted data 
and the location information simultaneously or subsequently to 
record them on a memory section and reads out the data body of 
the contents file on the recording medium for distribution to 
reproduce it, and at the same time, recognizes the omitted part 
of the data body with reference to the location information read 
out from the memory section and reads out and reproduces the 
omitted data on the memory section as the data of the relevant 
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omitted part. 
[0071] 

Therefore, in the recording medium for distribution a, 
although the header information a and the data body bare encrypted, 
respectively, it is arbitrary whether or not the encryption is 
performed. However, it is desirable that at least the data body 
b is encrypted. Furthermore, while the contents file is 
structured to have the header information a and the data body 
b, it is obviously possible to record the contents file with 
other information added thereto. This other information 
includes a program by which it is determined whether or not the 
reproduction software has been installed in the computer of the 
user, and when it is determined that the reproduction software 
has not been installed, HP of the management center 110 is 
automatically accessed, and the like. When this program has 
been recorded and the user sets the recording mediiam for 

distribution a which he or she has in advance obtained in his 
or her computer (computer equivalent to the digital contents 
reproducing device 12 0, which is in a state that the reproduction 
software is not downloaded) , the WEB address of the management 
center 110 is read out, and based on this, the management center 
110 is accessed. Thereafter, the reproduction software can be 
obtained by the above-described procedure. Although the 
contents file is designed such that a part thereof is omitted, 
it can be obviously designed such that a plurality of points 
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are omitted. 

[0072] 

While the location information is designed to be a data 
length or a time from the starting location information to the 
omitted part, it may be an address value indicating the omitted 
part or the like. In this case, it is sequentially determined 

whether or not an address value of the data body b on the recording 

medium for distribution a to be read out next and the location 
information coincide with each other,- and as a result of the 
determination, when they are determined not to coincide with 
each other, the data body b on the recording medium for 

distribution a which the address value indicates is read out, 
while when they are determined to coincide with each other, the 
omitted data on the memory section 125 is read out. 
[0073] 

While the piece data d consists of the omitted data body 
and the location information, whether or not the location 
information is contained is arbitrary. In this case, for example, 
omitted location information indicating the omitted part is in 
advance recorded before the omitted part of the data body b, 
and the data body b is reproduced, and further counting is 
performed from the starting location information to the omitted 
location information. When this counting is finished, the 
omitted data on the memory section 125 may be reproduced as the 
data of the relevant omitted part- Alternatively, a location 
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of the omitted part of the data body b is predetermined, and 
the location information of the omitted data is prepared in the 
reproduction software. It is possible that the data body b is 
reproduced and that at the same time, the omitted part of the 
data body b is recognized based on this location information 
and that the omitted data on the memory section 125 is reproduced 
as the data of the relevant omitted part. 
[0074] 

Thus, the contents of the reproduction software are only 
one example, and any modification in design can be made as long 
as similar contents can be realized. It is true of the 
interruption program for user registration, the interruption 
program for reproduction software download, and the interruption 
program for piece data delivery. 
[0075]. 

In the first embodiment, the system can also be changed 
in design so as to prevent illegal use of a contents file on 
the recording medium for distribution a not delivered on a rental 
basis but transferred to the user for pay or for free. In this 
case, advantages similar to the foregoing are also brought about . 
In the contents of the reproduction software used in this case, 
only the series of processings when the contents file is inside 
and outside of the rental period are deleted. With respect to 
the digital contents reproducing device, the reproduction 
software may not be downloaded from the management center 110, 
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but may be installed through a recording medium such as CD. 
Furthermore, obviously, the digital contents reproducing device 
is not a computer but can be a dedicated device, and any 
configuration can be used as long as the digital contents 
reproducing device has the function in which when a reproduction 
application for a contents file under the condition of 
authentication and billing is inputted by a user, the relevant 
application is transmitted to the management center 110 via the 
communication line P and thereafter when the piece data d is 
transmitted from the management center 110 via the communication 
line p, the data body b on the recording medium for distribution 
a is reproduced by using the header information on the recording 
medium for distribution a and the relevant piece data d at the 
time of reproducing operation. 

Embodiment 2 
[0076] 

Next, a second embodiment of the present invention is 
described with reference to the drawings. Fig. 6 is a 
configuration diagram of a digital contents illegal use 
preventing system. Fig . 7 is a flowchart of reproduction software 
used for this system. Fig. 8 is a flowchart of an interruption 
program for user registration which is processed by a control 
section in a delivery management center of this system, and Fig. 
9 shows an interruption program for piece data delivery which 
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is processed by the control section in the delivery management 

center of this system, 

[0077] 

A digital contents (data) illegal use preventing system 
200 as shown in Fig. 7 is a system preventing a contents file 
delivered to a user for a rental purpose from being used illegally. 

[0078] 

This system has a configuration comprising a delivery 
management center 210 (electronic equipment) which is a server 
in which a contents file having the header information a and 
the data body bis prepared in advance with the header information 
a and with part of the data body b omitted^ and the piece data 
d consisting of omitted data and location information indicating 
in which part of the data body b the relevant omitted data is 
located is prepared in advance separately from the relevant 
contents file, the delivery management center 210 functioning 
as delivery management means for delivering the relevant contents 

file via a communication line P (as in Embodiment 1 ) andmeanwhile, 
managing the utilization of the relevant databodyb, and a digital 
contents reproducing device 220 (data reading device) which can 
intercommunicate with the delivery management center 210 via 
the communication line P and is used when the contents file 
delivered from the delivery management center 210 is reproduced 
and copied. 
[0079] 
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The contents file has the data body b which is data of 
luusiC/ moving image, static image, text, game, software or the 
like, and the header information a containing reproduction 
information for reproducing this data body b and contents 
information such as a contents ID assigned to this data body 
b and WEB address information of the delivery management center 
210, and after the header information a and the data body b are 
encrypted, respectively, the contents file obtains a data 
structure in which part of the relevant data body b is omitted. 
At the beginning of the databodyb, starting location information 
indicating a starting location of the relevant data body b is 
recorded. The location information indicating in which part 
of the data body b the omitted data is located is a data length 
or a time from the starting location information to the omitted 
part . 
[0080] 

The delivery management center 210 is a server operated 
by a person doing a business in which the content file is rented 
to a user and a rental fee is collected from the user under an 
agreement between the user and an owner of copyright or the like 
of a copyrighted work contained in the data body b of the contents 
file to be delivered- In the figure, reference numeral 211 
denotes a digital contents DB (an auxiliary memory device) on 
which the contents file having the header information a and the 
data body b is in advance recorded with- part of the data body 



b omitted, reference niimeral 212 denotes a control section such 

as a computer, reference numeral 213 denotes a communication ' 

section for performing communication, reference numeral 214 

denotes a user information DB on which user information is 

recorded and information such as authentication andbillingbased 

on the user information is recorded sequentially, reference 

numeral 215 denote a software DB on which the reproduction 

software and a decryption key cl necessary for decrypting the 

header information a of the contents file are recorded in advance, 

reference numeral 216 denotes a piece data DB on which the piece 

data d and the decryption key c2 necessary for decrypting the 

data body b of the contents file are recorded in advance, and f 

reference numeral 217 denotes a memory section such as a hard 

disk. 

[0081] 

On the memory section 217, in addition to basic programs 
such as an operation system as a server, an interruption program 
for user registration as shown in Fig. 8, an interruption program 
for reproduction software download not shown in the figure, an 
interruption program for contents download not shown in the 
figure, an interruption program for piece data delivery as shown 
in Fig. 9 and the like are recorded. The contents of these ^ 
programs will be described later. By processing these programs 
in the control section 212, this server exerts a function as 
the delivery management center. Furthermore, on the memory 
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section 217, data necessary for user registration processing 
and data necessary for reproduction application processing are 
recorded. 

The contents ID indicating the corresponding contents file 
is added to the piece data d on the piece data DB 216. Thus, 
by using the contents ID, a correspondence relationship between 
the contents file and the piece data d on the piece data DB 216 
coincides. Similarly, a user ID and a player ID of a 
corresponding user are added to the user information on the user 
information DB 214. Thus, by using the user ID or the player 
ID, a correspondence relationship between the user and the user 
information in the user information DB 214 coincides. 
[0082] 

Since the delivery management center 210 confirms (namely, 
authenticates) the user ID and a password and in addition, 
confirms whether or not the player ID coincides before 
transmitting the piece data d to the digital contents reproducing 
device 220, the player ID is also useful for preventing illegal 
use . 
[0083] 

The digital contents reproducing device 220 is a 
general-purpose computer used by the user. In the figure, 
reference numeral 221 denotes a control section such as CPU, 
reference numeral 222 denote an output section such as a monitor 
and a speaJcer , reference numeral 223 denotes an operation section 
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such as a keyboard and a mouse, reference numeral 224 denotes 
amemory section suchas aharddisk, reference numeral 225denotes 
a reproduction and copy section reading/writing the data with 
respect to the recording medium or the like, and reference numeral 
226 denotes a communication section for performing 
communication . 
[0084] 

On the memory section 224, in addition to basic programs 
such as operation system as a computer, the reproduction software 
as shown in Fig. 7 is recorded. This reproduction software is 
chargeable or free software downloaded through the communication 
line P from the delivery management center 210 under the condition 
of user registration, and application software necessary for 
reproducing the contents file. Furthermore, the information 
of a WEB address of the delivery management center 210 in which 
the player ID assigned to the reproduction software and the piece 
data d are stored is transmitted from the delivery management 
center 210 to the memory section 224 together with the relevant 
reproduction software and is stored therein. Further, on the 
memory section 224, the piece data d, the decryption keys cl, 
c2 and the like which have been transmitted from the delivery 
management center 210 are recorded, and rental information 
indicating a rental period and the like is recorded. 

The contents of the reproduction software will be described 
later. The processing of this reproduction software by the 
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control section 221 as shown in Fig. 7 allows this computer to 
exert the function as the digital contents reproducing device 
220. 
[0085] 

The operation of the digital contents illegal use 
preventing system 200 configured as described above is described 
and in conjunction with this, the operation of the digital 
contents reproducing device 220, the operation of the delivery 
management center 210, and the contents of the respective 
programs are described. 
[0086] 

The user operates the operation section 223 of his or her 
own computer (computer equivalent to the digital contents 
reproducing device 220, which is in a state that the reproduction 
software is not downloaded) to access the delivery management 
center 210 via the communication line P to request user 
registration. The delivery management center 210 processes the 
interruption program for user registration as shown in Fig. 8 
in accordance with this request, and transmits the data necessary 
for the user registration to the computer (s21) . Thereafter, 
the user inputs his or her name, address and payment condition, 
^^a banlc account number or a credit card number of his or hers, 
etc." as displayed in a user registration screen through the 
operation section 223 of the computer and transmits this 
registration data to the delivery management center 210 via the 
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communication line p. Then, the delivery management center 210 
creates the user ID and the password in accordance with this 
to register the relevant user ID and the like to the user 
information DB 214 together with the registration data as user 
information (s22) . On the other hand, the relevant user ID and 
password are transmitted to the computer of the user via the 
communication line 3 (s23) . Then, the processing of the 
interruption program for user registration is finished. The 
user ID and the password may be inputted by the user himself 
or herself at the time of user registration. 
[0087] 

Thereafter, the user operates his or her computer to access 
the delivery management center 210 and inputs a request for the 
download of the reproduction software. At this time, the user 
ID and the password are required. Then, the computer of the 
user transmits the request to the delivery management center 
210 via the communication line p. The delivery management center 
210 processes the interruption program for reproduction software 
download in accordance with this request, reads out the 
reproduction software and the decryption key cl on the software 
DB 215, and transmits them to the computer of the user via the 
communication line p. Then, the reproduction software is 
downloaded to thememory section 224 of the computer and installed. 
At the same time, the decryption key cl is recorded on the memory 
section 224. This makes the computer into the digital contents 
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reproducing device 220. 
[0088] 

Next, in order to acquire the contents file, the digital 
contents reproducing device 220 accesses a contents download 
address of the delivery management center 210 in accordance with 
the operation through the user operation section 223 of the user. 
Then, the delivery management center 210 processes the 
interruption program for contents download. The data of a 
contents file list is transmitted to the digital contents 
reproducing device 220. The digital contents reproducing 
device 220 outputs and display the contents file list on the 
output section 222 based on this data. In order to access the 
delivery management center 210, after the reproduction software 
is executed, the delivery management center 210 may be accessed 
based on the WEB address recorded together with the relevant 
software, or may be accessed based on the WEB address that the 
user has registered in an internet browser. 
[0089] 

Thereafter, the user selects the contents file to download 
from the contents file list through the operation section 223. 
The data of application for downloading the selected contents 
file is transmitted to the delivery management center 210. 
[0090] 

Upon receiving this application data, the delivery 
management center 210, with reference to the contents ID 
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contained in the application data, searches for the contents 

file corresponding to the relevant contents ID from the digital 

contents DB 211, and reads out and transmits it to the digital 

contents reproducing device 220. Upon receiving the relevant 

contents file, the digital contents reproducing device 220 

records it on a registry of the memory section 224 or the recording 

medium set in the reproduction and copy section 225. At the 

same time, a file name of the relevant contents file is recorded 

on a play list of the reproduction software on the memory section 

224. In this manner, the contents file is acquired. The 

download of the contents file may be acquired by another computer 

connected to the delivery management center 210 via the 

communication line P to record it on a recording medium. 
[0091] 

Thereafter, when the user performs execution operation 
of the reproduction software with respect to this digital 
contents reproducing device 22 0 (in the case where the contents 
file is recorded on the recording medium, the execution operation 
of the reproduction software is performed, while the relevant 
recording medium is set in the reproduction and copy section 
225) , thedataof areproductionplayer and theplaylist contained 
in the relevant reproduction software is outputted and displayed 
on the output section 222. Then, the play list is displayed 
on a screen of the reproducing player ( si ) . This play list shows 
a file name of the downloaded contents file and whether or not 



the relevant contents file is being rented. That is, the contents 
file with a predetermined flag hoisted, which indicates that 
a reproduction application has been made, is displayed as the 
one being rented. Based on this play list, it is determined 
whether or not the reproducing operation of the contents file 
being rented has been performed through the operation section 
223 (s2) . 
[0092] 

If it is determined that the reproducing operation has 
not been performed, then it is determined whether or not the 
application operation for reproduction of the contents file not 
being rented which is displayed on the play list has beenperf ormed 
through the operation section 223 (s3) . As a result, if it is 
determined that the application operation for reproduction has 
not been performed, then it is determined whether or not reading 
operation of the recording medium (operation of DISC LOAD) has 
been performed through the operation section 223 (s4) . When 
the operation of DISC LOAD is performed, the contents list 
indicating a contents file on the recording medium which is not 
recorded on the play list (that is, downloaded on the recording 
medium with another computer or the like) is outputted and 
displayed (s5) on the output section 222. Namely, while the 
decryption key cl on the memory section 225 is read out, the 
header information a of the contents file on the recording medium 
is read out and by using the relevant decryption key cl, the 
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header information a is decrypted to read out the contents 
information contained in the relevant header information a, and 
the contents file with the predetermined flag not hoisted among 
the contents files on the recording medium is displayed on the 
contents list. 
[0093] 

Thereafter, when an application for reproduction of the 
contents file not being rented on the play list or the contents 
file on the contents list is performed by the user(s3 or s6) , 
the decryption key cl on the memory section 224 is read out, 
while the header information a of the relevant contents file 
on the memory section 224 or on the recording medium is read 
out and decrypted by using the relevant decryption key cl, and 
based on the WEB address of the contents information contained 
in this, the contents ID contained in the relevant header 
information a is transmitted to the delivery management center 
210 via the communication line p. In this manner, the execution 
of the reproduction application processing is transmitted. 
[0094] 

Then, the delivery management center 210 processes the 
interruption program for piece data delivery as shown in Fig. 
9, and transmits the data necessary for the reproduction 
application processing to the digital contents reproducing 

device 220 via the communication line P (s31) . Based on this 
data, the digital contents reproducing device 22 0 outputs and 
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displays a reproduction application screen on the output section 

222 (s7) . 

[0095] 

Thereafter, when the user sequentially inputs or selects 
a rental period through the operation section 223 as displayed 
on the reproduction application screen (this automatically 
determines a rental amount of money) , and finally inputs the 
user ID and the password through the operation section 223 as 
the reproduction application of the contents file (s8), the 
digital contents reproducing device 220 shifts the display output 
of the output section 222 to an authentication screen, while 
the inputted application data is transmitted to the delivery 
management center 210 via the communication line p. At this 
time, the contents ID of the contents information on the memory 
section 224 or on the recording medium and the player ID on the 
relevant memory section 224 are read out and transmitted to the 
delivery management center 210 together with the application 
data (s9) . 
[0096] 

The delivery management center 210 confirms the 
authentication of the user relating to the application {s32) . 
Namely, with reference to the transmitted user ID and player 
ID of the user, etc., the user information of the relevant user 
is read out from the user information DB 214, and whether or 
not the relevant user is an authentic user is confirmed. At 
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this time, the delivery management center 210 has in advance 
prepared a list of inappropriate persons with nonpayments of 
rental fee more than or equal to predetermined times or the like 
in the user information DB 214, and in addition to the 
authentication, confirms whether or not the user falls under 
the list of inappropriate persons (this confirmation of the list 
of inappropriate persons is arbitrary) . 
[0097] 

In the case where the delivery management center 210 has 
confirmed that the user relating to the application is an 
unauthentic user or an authentic user but a person who falls 
under the list of inappropriate persons, the rejection of the 
application of the user is transmitted to the digital contents 

reproducing device 220 via the communication line P (s33) . Then, 
the interruption program for piece data delivery is finished. 
[0098] 

On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the player ID of the user or the lilce, 
accounting is recorded on the user information of the user on 
the user information DB 214, while with reference to the contents 
ID, the piece data DB 216 is searched to read out the piece data 
d and the decryption key c2 corresponding to the relevant contents 
ID and to transmit them to the digital contents reproducing device 
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220 as a reply indicating that the application of the user is 
accepted together with the rental information contained in this 

reproduction application data via the communication line p (s34) . 
Then, the processing of the interrupt program for piece data 
delivery is finished. 
[0099] 

The charge is charged to a bank/ credit card company 230 
or charged directly to the user, based on the user information 
DB 214 for every predetermined period and the user transfers 
the charge to an account or pays it in a convenience store or 
the like . Furthermore, in the case where the delivery management 
center 210 is connected to the bank/credit card company 230 via 

the communication line P, it is obviously possible to immediately 

settle accounts, too. 

[0100] 

Thereafter, upon receiving the rejection of the 
application of the user via the communication line p (slO) , the 
digital contents reproducing device 220 outputs and displays 
an error message to the output section 222 (sll). 
[0101] 

On the other hand, when the piece data d and the decryption 
key c2, and the rental information are received via the 
communication line p (slO) , the predetermined flag is hoisted, 
while the piece data d, the decryption key c2 and the rental 
information are recorded on the memory section 224 (sl2) . At 
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the same time, by using a clock function of the computer, a piece 
data transmission date and time is recorded on the memory section 
224. Then, the play list is updated, and outputted and displayed 
on the output section 222, so that a file name of the contents 
file with the piece data d obtained is displayed on the relevant 
play list (si) . 
[0102] 

Thereafter, when the reproducing operation of the contents 
file being rented is performed based on the play list through 
the operation section 223 (s2) , the digital contents reproducing 
device 220 reads out the decryption key cl from the memory section 
224, and meanwhile, it reads out the header information a of 
the contents file on the memory section 224 or on the recording 
medium and decrypts the header information a by using the 
decryption key cl . Then, the data body b on the memory section 
224 or on the recordingmedium is readout by using the reproduction 
information contained in the relevant header information a and 
is reproduced while being decrypted with the decryption key c2 
on the memory section 224 (sl3) . In addition, while the starting 
location information of the data body b on the memory section 
224 or on the recording medium is read out, the piece data d 
on the memory section 224 is read out and the counting of a data 
length or a time from the starting location information to the 
location information contained in the piece data d is started 
(sl4) . Thereafter, whether or not the counting is finished is 
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determined (slS) . Thereby, the omitted part of the data body 
b is recognized. As a result of this determination, when it 
is determined that the counting is finished and the omitted part 
of the data body b is recognized, the piece data d on the memory 
section 224 is read out and the omitted data contained in the 
relevant piece data d is read out as the data of the omitted 
part of the relevant data body b and is reproduced while being 
decrypted with the decryption key c2 on the memory section 
224 {sl6) . Then, the data body b on the memory section 224 or 
on the recording medium is read out again and is subsequently 
reproduced while being decrypted with the decryption key c2 on 
the memory section 224 (sl7) . This reproduction software 
program is finished upon end processing by the user. 
[0103] 

Furthermore, the reproduction software, in addition to 
the above-described basic function, has a piece data management 
function which is resident in the relevant digital contents 
reproducing device 220 to manage the piece data d when the digital 
contents reproducing device 220 is turned ON. This piece data 
management function manages the piece data d on the memory section 
224, While it obtains a difference between a piece data 
transmission data and time and a current date and time as an 
elapsed period from a time point when the piece data d is 
transmitted, and when this reaches the rental period contained 
in the rental information, it is determined to be outside of 
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the rental period and the piece data d and the decryption key 
c2 on the memory section 224 are deleted, and the predetermined 
flag is hauled down. 
[0104] 

Thus, in this system 200, even when the user operates to 
reproduce the contents file by using the digital contents 
reproducing device 220, the data body b of the contents file 
cannot be reproduced unless the user obtains the piece data d 
from the delivery management center 210 as an authentic 
reproduction applicant. Accordingly, the temporary, illegal 
use of the contents can be prevented. In addition, with respect 
to the contents file whose rental period has passed, the piece 
data d is deleted, which can also prevent secondary illegal use. 
Furthermore, even if the contents file is copied to another 
recording medium by the user, since in the contents file recorded 
on this recording medium, the reproduction information contained 
in the header information a is omitted, the contents file cannot 
be reproduced unless the user obtains the piece data d as an 
authentic reproduction user . Therefore, tertiary, illegal use 
can also be prevented. 
[0105] 

Furthermore, outside of the rental period of the digital 
contents, only the piece data d or the like on the memory section 
224 is deleted automatically, and the contents file remains as 
it is. Thus, inside and outside of the rental period, the 
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contents file can be copied to another recording medium by using 
the digital contents reproducing device 220. In order to 
reproduce such a contents file on the recording medium, 
authentication to the delivery management center 210 and payment 
of rental fee by using the digital contents reproducing device 
220 are required, so that the collection of charge in accordance 
with the secondary and tertiary use can be ensured. 
[0106] 

Moreover, in this system, since the contents file can be 
easily recorded on the recording medium by using computer having 
a write function as described above, a rental video shop or the 
like can employ a form of setting up the relevant computer instead 
of displaying recording media such as video tapes, CD and DVD. 
This makes it unnecessary to return the recording medium, which 
brings advantages to both the agency and customers . In addition, 
since a shop clerk does not know what contents file a customer 
downloads, some kinds of digital contents become easy to rent. 
In this case, it goes without saying that a form of a rental 
video shop need not be employed but a form of a service by an 
internet cafe can be employed. The contents DB may be set up 
in the rental video shop or the internet cafe. 
[0107] 

This illegal use preventing system 200 may be subject to 
any design modification as long as it comprises delivery 
management means which is a server having a first database on 
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which a contents file with a header information and a data body 
is recorded with part of the relevant data body omitted and a 
second database on which this omitted data and location 
information indicating in which part of the data body the relevant 
omitted data is located is recorded, and which can deliver the 
relevant contents file via a communication line, and meanwhile 
manages the utilization of the relevant contents file, and a 
digital contents reproducing device which can intercommunicate 
with this delivery management means via the communication line, 
and which is used in reproducing the contents file delivered 
from the delivery management means, wherein when a request for 
download of the contents file is inputted to the digital contents 
reproducing device by a user, the digital contents reproducing 
device transmits the relevant request to the delivery management 
means via the communication line, the delivery management means 
transmits the contents file relating to the relevant request 
to the digital contents reproducing device via the communication 
line, and the digital contents reproducing device receives the 
relevant contents file to record it on the memory section or 
on the recording medium, while when an application for 
reproduction of the contents file is inputted to the digital 
contents reproducing device by the user, the digital contents 
reproducing device transmits the relevant application to the 
delivery management means via the communication line, the 
deli very management means transmits omitted data and its location 
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information of the contents file relating to the relevant 
application simultaneously or sequentially to the digital 
contents reproducing device via the communication line, and the 
digital contents reproducing device receives the relevant 
omitted data and its location information simultaneously or 
subsequently to record it on the memory section and reads out 
the data body of the contents file on the memory section or on 
the recording medium to reproduce it, and at the same time, the 
digital contents reproducing device recognizes the omitted part 
of the data body with reference to the location information read 
out from the memory section, and reads out and reproduces the 
omitted data on the memory section as the data of the relevant 
omitted part. 
[0108] 

Therefore, although the delivery management center 210 
is designed to have one digital contents DB 211, it may have 
a plurality of digital contents DBs . In this case, the design 
may be such that different kinds of contents file groups are 
stored in the respective DBs, for example, contents files of 
movie are stored in a first DB and content files of music are 
stored in a second DB, or such that the contents file groups 
stored in the respective DBs are the same and the concentration 
of access on a first DB during busy hours is prevented. It is 
true of the piece data DB 21 6 . Furthermore, although the delivery 
management center 210 is designed to have the digital contents 
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DB 211 and the piece data DB 216, the digital contents DB 211 
and the piece data DB 216 can also be set up in a different place 
from the delivery management center 210. In this case, the 
delivery management center 210 may authenticate the user and 
transmit a WEB address of the digital contents DB 211 and the 
piece data DB 216 to the digital contents reproducing device 
220, and the digital contents reproducing device 220 may access 
the digital contents DB 211 and the piece data DB 216 based on 
the relevant WEB address to obtain the contents file and the 
piece data d. 
[0109] 

Furthermore, although the digital contents DB 211 has the 
header information a and the data body b recorded in an encrypted 
state, respectively, it is arbitrary whether or not the 
encryption is performed. However, it is desirable that at least 
the data body b is encrypted. Furthermore, while the contents 
file is structured to have the header information a and the data 
body b, it is obviously possible to record the contents file 
with other information added thereto. Other information 
includes a program by which it is determined whether or not the 
reproduction software has been installed in the computer of the 
user, and when it is determined that the reproduction software 
has not been installed, HP of the delivery management center 
210 is automatically accessed, and the like. When this program 
has been recorded and the user attempts to execute the contents 
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file which he or she has in advance obtained in his or her computer 
(computer equivalent to the digital contents reproducing device 
220, which is in a state that the reproduction software is not 
downloaded) , the WEB address of the delivery management center 
210 is read out , and based on this, the delivery management center 
210 is automatically accessed. Thereafter, the reproduction 
software can be obtained by the above-described procedure. 
Although the contents file is designed such that a part thereof 
is om^itted, it can be obviously designed such that a plurality 
of points are omitted. 
[0110]' 

While the location information is designed to be a data 
length or a time from the starting location information to the 
omitted part, it may be an address value indicating the omitted 
part or the like. In this case, it is sequentially determined 
whether or not an address value of the data body b on the recording 
medium for distribution a to be read out next and the location 
information coincide with each other and as a result of the 
determination, when they are determined not to coincide with 
each other, the data body b on the memory section 224 or on the 
recording medium which the address value indicates is read out, 
while when they are determined to coincide with each other, the 
omitted data on the memory section 224 is read out. 
[0111] 

While the piece data d consists of the omitted data body 
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and the location information, whether or not the location 
information is contained is arbitrary. In this case, for example, 
omitted location information indicating the omitted part is in 
advance recorded before the omitted part of the data body b, 
and the data body b is reproduced, and further counting is 
performed from the starting location information to the omitted 
location information. When this counting is finished, the 
omitted data on the memory section 224 may be reproduced as the 
data of the relevant omitted part. Alternatively, a location 
of the omitted part of the data body b is predetermined, and 
the location information of the omitted data is prepared in the 
reproduction software. It is possible that the data body b is 
reproduced and that at the same time, the omitted part of the 
data body b is recognized based on this location information 
to reproduce the omitted data on the memory section 224 as the 
data of the relevant omitted part. 
[0112] 

Thus, the contents of the reproduction software are only 
one example, and any modification in design can be made as long 
as similar contents can be realized. It is true of the 
interruption program for user registration, the interruption 
program for reproduction software download, and the interruption 
program for piece data delivery. 
[0113] 

Furthermore, in the case where the contents file is 
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recorded on the memory section 224 of the digital contents 
reproducing device 220, after the rental period has passed, the 
contents file may be deleted together with the piece data d, 
or separately from the piece data d, an elapsed time from a point 
of time when the contents file is received is obtained and when 
the relevant elapsed time reaches a predetermined period, the 
relevant contents file may be deleted. 
[0114] 

In the second embodiment, the system can also be changed 
in design so as to prevent illegal use of a contents file which 
is not delivered on a rental basis but transferred for pay or 
for free. In this case, advantages similar to the foregoing 
are also brought about. In the contents of the reproduction 
software used in this case, only the processing when the delivered 
contents file is outside of the rental period is deleted. 
Furthermore, as for the digital contents reproducing device 22 0, 
the reproduction software may not be downloaded from the delivery 
management center 210, but may be installed through a recording 
medium such as CD. Furthermore, obviously, the digital contents 
reproducing device 220 is not a computer but can be a dedicated 
device . 

Embodiment 3 
[0115] 

Next, a third embodiment of the present invention is 
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described with reference to the drawings. Fig. 10 is a 
configuration diagram of a digital contents illegal use 
preventing system relating to the third embodiment of the present 
invention. Fig. 11 is a flowchart of reproduction software used 
for the digital contents illegal use preventing system, and Fig. 
12 is a flowchart of an interruption program for contents 
download. 
[0116] 

A digital contents illegal use preventing system 300 as 
shown in Fig. 10 has the same configuration as that of the illegal 
use preventing system 200. Different points are the contents 
of reproduction software recorded on a memory section 324 of 
a digital contents reproducing device 320 (refer to Fig. 11) 
and the contents of the interruption program for contents 
download recorded on a memory section 317 of a delivery management 
center 310 (refertoFig. 12) . Hereinafter, the different points 
are described in detail, and a description of overlapping parts 
is omitted. 
[0117] 

The reproduction software is downloaded to the digital 
contents reproducing device 320 and recorded on the memory 
section 324 by procedure similar to that of Embodiment 2. 
[0118] 

Next, in order to acquire a contents file, the digital 
contents reproducing device 320 accesses a contents download 
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address of the delivery management center 310 in accordance with 
the operation through a user operation section 323 of the user. 
Then, the delivery management center 310 processes the 
interruption program for contents download as shown in Fig. 12. 
The data of a contents file list necessary for rental application 
processing and the like are transmitted to the digital contents 
reproducing device 320 via the communication line p (s21) . The 
digital contents reproducing device 320 outputs and displays 
a rental application screen on an output section 322 based on 
this data. 
[0119] 

Thereafter, when the user sequentially inputs or selects 
the contents file and a rental period thereof through the 
operation section 323 as displayed on the reproduction 
application screen (this automatically determines a rental 
amount of money) , and finally inputs a user ID and a password 
through the operation section 323 as a rental application of 
the contents file, the digital contents reproducing device 320 
shifts the display output of the output section 322 to an 
authentication screen, while the inputted application data is 
transmitted to the delivery management center 310 via the 
communication line p. At this time, a player ID on the memory 
section 324 is read out and transmitted to the delivery management 
center 310 together with the application data. 
[0120] 
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The delivery management center 310 confirms the 
authentication of the user relating to the application (s22) . 
Namely, with reference to the transmitted user ID and player 
ID of the user, etc., the user information of the relevant user 
is read out from a user information DB 314, and whether or not 
the relevant user is an authentic user is confirmed. At this 
time, the delivery management center 310 has in advance prepared 
a list of inappropriate persons with nonpayments of rental fee 
more than or equal to predetermined times or the like in the 
user information DB 314, and in addition to the authentication, 
confirms whether or not the user falls under the list of 
inappropriate persons (this confirmation of the list of 
inappropriate persons is arbitrary) . 
[0121] 

In the case where the delivery management center 310 has 
confirmed that the user relating to the application is an 
unauthentic user or an authentic user but a person who falls 
under the list of inappropriate persons, the rejection of the 
application of the user is transmitted to the digital contents 

reproducing device 320 via the communication line p (s23) . 
[0122] 

On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the contents ID, the selected contents 
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file is searched and read out from a digital contents DB 311, 
while the piece data d and the decryption key c2 corresponding 
to the relevant contents ID are searched and read out from a 
piece data DB 316, and the contents file, the piece data d and 
the decryption key c2 are sequentially transmitted to the digital 
contents reproducing device 320 as a reply indicating that the 
application of the user is accepted together with the rental 
information via the communication line P (s24) . Then, with 
reference to the player ID of the user and the like, accounting 
is recorded on the user information on the user information DB 
314 of the relevant user. 
[0123] 

The accounting is summed up based on the user information 
DB 314 for every predetermined period, and is charged to a bank/ 
credit card company 330 or charged directly to the user, so that 
the user transfers the charge to an account or pays it in a 
convenience store or the like. Furthermore, in the case where 
the delivery management center 310 is connected to the 
bank/credit card company 330 via the communication line P, it 
is obviously possible to immediately settle accounts, too. 
[0124] 

Thereafter, upon receiving the rejection of the 
application of the user via the communication line p, the digital 
contents reproducing device 320 outputs and displays an error 
message to the output section 322. 
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[0125] 

On the other hand, when the relevant contents file and 
the like are received via the communication line p, the relevant 
contents file is recorded on a registry of the memory section 
324 or on a recording medium set in a copy section 325, while 
the piece data d, the decryption key c2 and the rental information 
are recorded on a predetermined registry for piece data different 
from the registry on which the contents file of the memory section 
324 is recorded- At the same time, a file name of the relevant 
contents file is recorded on a play list of the reproduction 
software on the memory section 324 . Then, a predetermined flag 
is hoisted. 
[0126] 

Thereafter, when the user performs execution operation 
of the reproduction software (in the case where the contents 
file is recorded on the recording medium, the execution operation 
for the reproduction software is performed, while the relevant 
recording medium is set) , the data of a reproduction player and 
the play list contained in the relevant reproduction software 
is outputted and displayed on the output section 322. Then, 
the play list is displayed on a screen of the reproduction software 
(si) . This play list shows a file name of the contents file 
and whether or not the relevant contents file is being rented. 
That is, the contents file with a predetermined flag hoisted 
is displayed as the one being rented. Based on this play list, 
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it is determined whether or not the reproducing operation of 
the contents file being rented has been performed through the 
operation section 323 {s2) . 
[0127] 

If it is determined that the reproducing operation has 
not been performed, then it is determined whether or not the 
application operation of the contents file not being rented has 
been performed through the operation section 323 based on the 
play list (s3) . Namely, it is determined whether or not the 
re-rental of the contents file whose rental period has been 
finished is applied for. As a result, if it is determined that 
the application for reproduction has been performed, then the 
decryption key cl on the memory section 324 is read out, while 
the header information a of the relevant contents file on the 
memory section 324 or on the recording medium is read out and 
by using the relevant decryption key cl, the header information 
a is decrypted and based on a WEB address of the contents 
information contained in the relevant header information a, the 
contents ID is transmitted to the delivery management center 
310 as a notice that the reproduction application processing 

is performed via the communication line p. 
[0128] 

Then, the delivery management center 310 processes an 
interruption program for piece data delivery (refer to Fig. 9) . 
Then, the delivery management center 310 transmits data necessary 

72 



for the reproduction application processing to the digital 
contents reproducing device 320 via the communication line (3 
(s31) . Based on this data, the digital contents reproducing 
device 320 outputs and displays a reproduction application screen 
on the output section 322 (s4) , 
[0129] 

Thereafter, when the user sequentially inputs or selects 
a rental period through the operation section 323 as displayed 
on the reproduction application screen (this .automatically 
determines a rental amount of money) , and finally inputs the 
user ID and the password through the operation section 323 as 
the reproduction application of the contents file (s5) , the 
digital contents reproducing device32 0 shifts the display output 
of the output section 322 to an authentication screen, while 
the inputted application data is transmitted to the delivery 
management center 310 via the communication line p. At this 
time, the contents ID of the contents information on the memory 
section 324 or on the recording medium and the player ID on the 
memory section 324 are read out and transmitted to the delivery 
management center 310 together with the application data (s6) . 
[0130] 

The delivery management center 310 confirms the 
authentication of the user relating to the application (s32) . 
Namely, with reference to the transmitted user ID and player 
ID of the user, etc., the user information of the relevant user 
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is read out from the user information DB 314, and whether or 
not the relevant user is an authentic user is confirmed. At 
this time, the delivery management center 310 has in advance 
prepared a list of inappropriate persons with nonpayments of 
rental fee more than or equal to predetermined times or the like 
in the user information DB 314, and in addition to the 
authentication, confirms whether or not the user falls under 
the list of inappropriate persons (this confirmation of the list 
of inappropriate persons is arbitrary) . 
[0131] 

In the case where the delivery management center 310 has 
confirmed that the user relating to the application is an 
unauthentic user or an authentic user but a person who falls 
under the list of inappropriate persons, the rejection of the 
application of the user is transmitted to the digital contents 
reproducing device 32 0 via the communication line p (s33) . Then, 
the interruption program for piece data delivery is finished. 
[0132] 

On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the player ID of the user or the like, 
accounting is recorded on the user information of the user on 
the user inf ormationDB 314 , while thepiece data DB 316 is searched 
to readout thepiece data d and the decryption key c2 corresponding 
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to the above-mentioned contents ID, and to transmit them to the 
digital contents reproducing device 320 as a reply indicating 
that the application of the user is accepted together with the 
rental information contained in this reproduction application 

data via the communication line P (s34) , Then, the processing 
of the interrupt program for piece data delivery is finished. 
The billing is performed in a manner similar to the foregoing. 
[0133] 

Thereafter, upon receiving the rejection of the 
application of the user via the communication line p (s7) , the 
digital contents reproducing device 320 outputs and displays 
an error message to the output section 322 (s8) . 
[0134] 

On the other hand, when the piece data d and the decryption 
Icey c2, and the rental information are transmitted as a replay 
that the application of the user is accepted from the delivery 

management center 310 via the communication line P (s7) , the 
predetermined flag is hoisted, while the piece data d, the 
decryption key c2 and the rental information are recorded on 
the above-described registry for piece data on the memory section 
324 (s9) . At the same time, by using a cloclc function of the 
computer, a piece data transmission date and time is recorded 
on the memory section 324. Then, the play list is updated, and 
outputted anddisplayedon the output section 322 so as to indicate 
the contents file with the piece data d acquired is being rented 
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(si) . 
[0135] 

Thereafter, when the reproducing operation of the contents 
file being rented is performed based on the play list through 
the operation section 323 (s2) , the digital contents reproducing 
device 320 reads out the decryption key cl from the memory section 
324, and meanwhile, it reads out the header information a of 
the contents file on the memory section 324 or on the recording 
medium and decrypts the header information a by using the relevant 
decryption key cl. Then, the data body b on the memory section 
32 4 or on the recordingmedium is readout by using the reproduction 
information contained in the relevant header information a and 
is reproduced while being decrypted with the decryption key c2 
on the memory section 324 (slO) , In addition, while starting 
location information of the data body b on the memory section 
324 or on the recording medium is read out, the piece data d 
on the memory section 324 is read out to start counting of a 
data length or a time from the starting location information 
to the location information contained in the piece data d (sll) . 
Thereafter, whether or not the counting is finished is determined 
(sl2) . Thereby, the omittedpart of the data body b is recognized. 
As a result of this determination, when it is determined that 
the counting is finished and the omitted part of the data body 
b is recognized, the piece data d on the memory section 324 is 
read out and the omitted data contained in the relevant piece 
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data d is read out as the data of the omitted part of the relevant 
data body b and is reproduced while being decrypted with the 
decryption key c2 on the memory section 324 (sl3) . Then, the 
data body b on the memory section 32 4 or on the recording medium 
is read out again and is subsequently reproduced while being 
decrypted with the decryption key c2 on the memory section 324 
.(sl4) . This reproduction software program is finished upon end 
processing by the user. 
[0136] 

Furthermore, the reproduction software, in addition to 
the above-described basic function, has a piece data management 
function which is resident in the relevant digital contents 
reproducing device 32 0 to manage the piece data d when the digital 
contents reproducing device 320 is turned ON. This piece data 
management f unctionmanages thepiece data don the memory section 
324, while it obtains a difference between a piece data 
transmission data and time and a current date and time as an 
elapsed period from a time point when the piece data d is 
transmitted, and when this reaches the rental period contained 
in the rental information, it is determined to be outside of 
the rental period and the piece data d and the decryption key 
c2 on the memory section 324 are deleted and the predetermined 
flag is hauled down. 
[0137] 

In the above-described illegal use preventing system 300, 
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since the piece data d can be obtained in concurrence with the 
contents file, the authentic temporary use of the contents file 
becomes easier as compared with Embodiment 2 . In addition, with 
respect to the contents file whose rental period has passed, 
the piece data d is deleted, which can also prevent secondary 
illegal use. Furthermore, even if the contents file is recorded 
on the recording medium by the user, since in this contents file 
recorded on this recording medium, the reproduction information 
contained in the header information a is omitted, the contents 
file cannot be reproduced unless the user obtains the piece data 
d as an authentic reproduction user. Therefore, tertiary, 
illegal use can also be prevented. 
[0138] 

Furthermore, outside of the rental period of the digital 
contents, only the piece data d and the like on the memory section 
324 are deleted automatically, and the contents file remains 
as it is. Thus, outside of the rental period, the contents file 
can be copied to another recording medium by using the digital 
contents reproducing device 320. In order to reproduce such 
a contents file on the recording medium, authentication to the 
delivery management center 310 and payment of rental fee by using 
the digital contents reproducing device 320 are required, so 
that the collection of charges in accordance with the secondary 
and tertiary use can be ensured. 
[0139] 
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Although the delivery management center 310 is designed 
to have one digital contents DB 311, it may have a plurality 
of digital contents DBs. In this case, the design may be such 
that different kinds of contents file groups are stored in the 
respective DBs, for example, contents files of movie are stored 
in a first DB and content files of music are stored in a second 
DB, or such that the contents file groups stored in the respective 
DBs are the same and the concentration of access on a first DB 
during busy hours is prevented. It is true of the piece data 
DB 316. Furthermore, although the delivery management center 
310 is designed to have the digital contents DB 311 and the piece 
data DB 316, the digital contents DB 311 and the piece data DB 
316 can also be set up in a different place from the delivery 
management center 310. In this case, the delivery management 
center 310 may authenticate the user and transmit a WEB address 
of the digital contents DB 311 and the piece data DB 316 to the 
digital contents reproducing device 32 0, and the digital contents 
reproducing device 320 may access the digital contents DB 311 
and the piece data DB 316 based on the relevant WEB address to 
obtain the contents file and the piece data d. 
[0140] 

Furthermore, although the digital contents DB 311 has the 
header information a and the data body b recorded in an encrypted 
state, respectively, it is arbitrary whether or not the 
encryption is performed. However, it is desirable that at least 
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the data body b is encrypted. 
[0141] 

Furthermore, while the contents file is structured to have 
the" header information a and the data body b, it is obviously 
possible to record the contents file with other information added 
thereto. Other information includes a program by which it is 
determined whether or not the reproduction software has been 
installed in the computer of the user, and when it is determined 
that the reproduction software has not been installed, HP of 
the delivery management center 310 is automatically accessed, 
and the like. When this program has been recorded and the user 
attempts to execute the contents file which he or she has in 
advance obtained in his or her computer (computer equivalent 
to the digital contents reproducing device 320, which is in a 
state that the reproduction software is not downloaded) , the 
WEB address of the delivery management center 310 is read out, 
and based on this, the delivery management center 310 is 
automatically accessed. Thereafter, the reproduction software 
can be obtained by the above-described procedure . Although the 
contents file is designed such that a part thereof is omitted, 
it can be obviously designed such that a plurality of points 
are omitted. 
[0142] 

While the location information is designed to be a data 
length or a time from the starting location information to the 
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omitted part, it may be an address value indicating the omitted 
part or the like. In this case, it is sequentially determined 
whether or not an address value of the data body b on recording 
medium for distribution a to be read out next and the location 
information coincide with each other, and when they are 
determined not to coincide with each other, the data body b on 
the memory section 324 or on the recordingmedium which the address 
value indicates is read out, while when they are determined to 
coincide with each other, the omitted data on the memory section 
324 is read out. 
[0143] 

While the piece data d consists of the omitted data body 
and the location information, whether or not the location 
information is contained is arbitrary. In this case, for example, 
omitted location information indicating the omitted part is in 
advance recorded before the omitted part of the data body b, 
and the data body b is reproduced, and further counting is 
performed from the starting location information to the omitted 
location information. When this counting is finished, the 
omitted data on the memory section 324 may be reproduced as the 
data of the relevant omitted part. Alternatively, a location 
of the omitted part of the data body b is predetermined, and 
the location information of the omitted data is prepared in the 
reproduction software. It is possible that the data body b is 
reproduced and that at the same time, the omitted part of the 
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data body b is recognized based on this location information 
to reproduce the omitted data on the memory section 324 as the 
data of the relevant omitted part. 
[0144] 

Thus, the contents of the reproduction software are only 
one example, and any modification in design can be made as long 
as similar contents can be realized. Furthermore, with respect 
to the contents of the interruption program for contents file 
download, any modification in design can be made as long as the 
contents are such that according to the application for 
downloading the contents file, the piece data d is downloaded 
together with, or separately from the contents file. It is true 
of the interruption program for user registration, the 
interruption program for reproduction software download, and 
the interruption program for piece data delivery. 
[0145] 

Furthermore, in the case where the contents file is 
recorded on the memory section 324 of the digital contents 
reproducing device 320, after the rental period has passed, the 
contents file may be deleted together with the piece data d, 
or separately from the piece data d, an elapsed time from a point 
of time when the contents file is received is obtained and when 
the relevant elapsed time reaches a predetermined period, the 
relevant contents file may be deleted.. 
[0146] 
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In the third embodiment, the system can also be changed 
in design so as to prevent illegal use of a contents file which 
is not delivered on a rental basis but transferred for pay or 
for free. In this case, advantages similar to the foregoing 
are also brought about- In the contents of the reproduction 
software used in this case, only the processing when the delivered 
contents file is outside of the rental period is deleted. 
Furthermore, as for the digital contents reproducing device 320, 
the reproduction software may not be downloaded from the delivery 
management center 310, but maybe downloaded through a recording 
mediiam such as CD. Furthermore, obviously, the digital contents 
reproducing device 32 0 is not a computer but can be a dedicated 
device . 

Embodiment 4 
[0147] 

Next, a fourth embodiment of the present invention is 
described with reference to the drawings. Fig. 13 is a 
configuration diagram of a digital contents illegal use 
preventing system relating to the fourth embodiment of the 
present invention. Fig. 14 is a flowchart of reproduction 
software used for this system. Fig. 15 is diagrams showing a 
contents file of this system. Fig. 15A being an image diagram 
of a data body and Fig. 15B being an image diagram of a part 
a of the data body, and Fig, 1 6 is a flowchart of recording medium 
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creating software executed by a computer which is a device for 
creating a recording medium for distribution used in this system. 
[0148] 

A digital contents illegal* use preventing system 400 as 
shown in Fig. 13 has the same configuration as that of the illegal 
use preventing system 100. Different points are the 
configuration of the contents file recorded on the recording 

medi\jm for distribution a and the contents of reproduction 
software recording on an auxiliary storage section 425 of a 
digital contents reproducing device 420 (refer to Fig. 14) . 
Hereinafter, the different points are described in detail, and 
a description of overlapping parts is omitted. 
[0149] 

The digital contents reproducing device 420 is a 
general-purpose computer used by a user. In the figure, 
reference numeral 421 denotes a control section such as CPU, 
reference numeral 422 denote an output section such as a monitor 
and a speaker, reference numeral 423 denotes an operation section 
such as a keyboard and a mouse, reference numeral 424 denotes 
a reproduction and copy section reading/writing the data with 
respect to the recording medium for distribution a and the like, 
and reference numeral 425 denotes an auxiliary storage section 
such as a hard disk, and reference numeral 42 6 denotes a main 
storage section such as DRAM, and reference numeral 427 denotes 
a communication section for performing communication which is 
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connected to the communication line p. 
[0150] 

On the auxiliary storage- section 425, in addition to basic 
programs such as an operation system as a computer, the 
reproduction software as shown in Fig. 14 is recorded. The 
contents of the reproduction software will be described later. 
The processing of this software on the main storage section 426 
by the control section 421 allows a function to be exerted as 
the digital contents reproducing device 420 in which the data 

body b recorded on the recording medium for distribution a is 
sequentially transferred to the main storage section 426 by the 
decryption bit length, and the relevant data on the main storage 
section 426 is sequentially decrypted by the decryption bit 
length and is returned from a compressed state to an original 
state for reproducing (reading) . 
[0151] 

The contents file on the recording medium for distribution 

a has the header information a and the data body b which is 
compressed in a compressing method such as MPEG and is subjected 
to well-known encryption, wherein part of the relevant data body 
b is omitted, the relevant omitted part is closed to continue 
the data body b, and dummy data with the same bit length as that 
of the omitted part is added to the end thereof (refer to Fig. 
15) . The control section 142 of the device for creating a 
recording medium for distribution 140 of Embodiment 1 processes 
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a program on the memory 145 shown in Fig. 16 to thereby create 
this recording medium for distribution a. The header 
information a of the contents file is first read out from a master 
disk set in the input section 141, only reproduction information 
contained in the relevant header information a is encrypted and 
the relevant header information a is recorded on a recording 
medium such as DVD set in the recording section 143 (si) . Next, 
the data body b of the contents file is read out from the master 
disk (s2), is compressed (s3) and is encrypted (s4) . Thereafter, 
part of the relevant data body b is separated (s5) . In the case 
where a plurality of points of the data body b are separated, 
with the data of the decryption bit length to be transferred 
to the main storage section 426 defined as one block, a part 
is separated from the relevant one block of data (s5) . Then, 
the relevant separated omitted data is recorded on the piece 
data memory 144 as the piece data d together with location 
information thereof (s6) . Meanwhile, the omitted part of the 
relevant data body b is closed to continue the relevant data 
body b (s7) and the dummy data with the same bit length as that 
of the omitted part is read out from the memory section 145 to 
add it to the end of the relevant data body b (s8) . In the case 
where the data body b is omitted at a plurality of points, the 
dummy data having a bit length of the bit length of the omitted 
data X the number of omitted points is added to the end of the 
data body b (s8) . The relevant data body b is recorded on the 
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recording medium such as DVD set in the recording section 143 
(s9) . This finishes the processing of this software. In the 
case where a plurality of points of the data body b are separated, 
the separation can be also performed so that the data of the 
decryption bit length is not of one block. 
[0152] 

The bit length of the omitted data is a bit length different 
from the decryption bit length, and a bit length different from 
divisors of the relevant decryption bit length. In the case 
where the data body b is omitted at a plurality of points, the 
bit length of the omitted data x the number of omitted points 
is a bit length different from the divisors of the decryption 
bit length. For example, when the decryption bit length is set 
at 10 bytes (that is, 80 bits), the bit length of the omitted 
data is set at 10 bytes, and 7 bytes (that is, 56 bits) and 13 
bytes (that is, 104 bits) which are bit lengths of byte numbers 
other than the divisors, and the like. When the bit length of 
the omitted data is set at 7 bytes, the data body b are not omitted 
at 10 and 20 points. These are because when the decryption bit 
length is 10 bytes, if the bit length of the omitted data is 
set at 20 bytes, a data row of the data of the decryption bit 
length after the omitted part makes no difference between before 
and after omitting the omitted data, and as a result, the data 
body b after the omitted part can be reproduced. Furthermore, 
when the omitted data with the bit length of 7 bytes is omitted 
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at 10 points, a data row of the decryption bit length after the 
tenth omitted part of the data body b makes no difference between 
before and after the omitted data is omitted, and as a result, 
there arises a possibility that the data body b after the tenth 
omitted part is reproduced. 
[0153] 

A description of a digital contents illegal use preventing 
method using the digital contents reproducing device 42 0 of the 
digital contents illegal use preventing system 400 configured 
as described above is given and in conjunction of this, the 
operation of amanagement center 410, the operation of the digital 
contents reproducing device 420, and the contents of the 
respective programs are described. The decryption keys cl, c2 
are recorded on a piece data DB 441 of the management center 
410. Hereinafter, for convenience, a case where one point of 
the data body b is omitted is described. 
[0154] 

In the digital contents reproducing device 420, the 
reproduction software is downloaded by the same procedure as 
that of Embodiment 1 and is recorded on the auxiliary storage 
section 425. 
[0155] 

When the recording medium for distribution a is set in 
the reproduction and copy section 424 by the user and the execution 
of the reproduction software is operated, this digital contents 

88 



reproducing device 420 reads out the relevant reproduction 
software from the auxiliary storage section 425 to the main 
storage section 42 6 for processing, and reads out the data such 
as a reproduction player, a play list contained in the relevant 
reproduction software on the main storage section 426 to output 
and display it on the output section 422. Then, the play list 
showing a content file being rented is displayed on a screen 
of the relevant reproducing player (si) . Namely, the contents 
file having a predetermined flag hoisted, which indicates that 
a reproduction application has been made, is displayed on the 
play list. Then, based on this play list, whether or not 
reproducing operation has been performed is determined through 
the operation section 423 (s2) . 
[0156] 

When it is determined that the reproducing operation has 
not been performed, it is determined whether or not reading 
operation (operation of DISC LOAD) of the recording medium for 
distribution a has been performed through the operation section 
423 {s3) . When the operation of DISC LOAD is performed, a 
contents list showing a contents file for which reproduction 
application has not been made is read out on the main storage 
section 426 and is outputted and displayed on the output section 
422 (s4) . Namely, contents information contained 'in the header 
information a of the contents file with a predetermined flag 
not hoisted among the contents files on the recording medium 
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for distribution a is read out on the main storage section 426 

and is displayed on the contents list. 

[0157] 

Thereafter, when an application for reproduction of the 
contents file on the contents list is performed by the user, 
the contents information contained in the header information 
a of the relevant contents file on the recording medium for 

distribution a is readout on the main storage section 42 6 . Then, 
based on a WEB address contained in the relevant contents 
information, a contents ID contained in the relevant contents 
information is transmitted to the management center 410 via the 

communication line p. In this manner, the execution of the 

reproduction application is transmitted. 

[0158] 

The management center 410 processes the interruption 
program for piece data delivery (take over and refer to Fig. 
4) . Then, the data necessary for the reproduction application 
processing is read out from the memory section 416 and is 
transmitted to the digital contents reproducing device 420 via 

the communication line (3 (s31) . Based on this data, the digital 
contents reproducing device 420 reads out the data of a 
reproduction application screen on the main storage section 426 
to output and display it on the output section 422 (s5) . 
[0159] 

Thereafter, when the user sequentially inputs or selects 
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a rental period through the operation section 423 as displayed 
on the reproduction application screen (this determines a rental 
amount of money) , and finally inputs a user ID and a password 
through the operation section 423 as a reproduction application 
of the recording medium for distribution a {s6) , the digital 
contents reproducing device 420 transmits the inputted 
application data to the management center 410 via the 
communication line p. At this time, the contents ID contained 
in the contents information of the header information a on the 
recording medium for distribution a and the player ID on the 
auxiliary storage section 425 are read out on the main storage 
section 42 6, and transmitted to the management center 410 
together with the application data (s7) . 
[0160] 

Upon receiving the relevant application data and the like, 
the management center 410 confirms the authentication of the 
user relating to the relevant application (s32) . Namely, with 
reference to the received user ID and player ID of the user, 
etc. , the user information of the relevant user is read out from 
a user information DB 414, and whether or not the relevant user 
is an authentic user is confirmed. At this time, the management 
center 410 has in advance prepared a list of inappropriate persons 
with nonpayments of rental fee more than or equal to predetermined 
times or the like in the user information DB 414, and in addition 
to the authentication, confirms whether or not the user falls 
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under the list of inappropriate persons (this confirmation of 

the list of inappropriate persons is arbitrary) . 

[0161] 

In the case where the management center 410 has confirmed 
that the user relating to the application is an unauthentic user 
or an authentic user but a person who falls under the list of 
inappropriate persons, the rejection of the application of the 
user is transmitted to the digital contents reproducing device 

420 via the communication line P (s33) . Then, the interruption 
program for piece data delivery is finished. 
[0162] 

On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the player ID of the user or the like, 
accounting is recorded on the user information of the user on 
the user information DB 414, while with reference to the contents 
ID, a piece data DB 111 is searched to read out the decryption 
keys cl, c2 and the piece data d corresponding to the relevant 
contents ID, and to transmit them to the digital contents 
reproducing device 420 as a reply indicating that the application 
of the user is accepted together with the rental information 
indicating the rental period and the like which are contained 

in the application data via the communication line P (s34) . Then, 
the processing of the interrupt program for piece data delivery 

92 



is finished. 
[0163] 

The accounting is summed up based on the user information 
DB 414 for every predetermined period, and is charged to a bank/a 
credit card company 4 30 or charged directly to the user, so that 
the user transfers the charge to an account or pays it in a 
convenience store or the like. Furthermore, in the case where 
the management center 410 is connected to the bank/credit card 
company 4 30 via the communication line (3, it is obviously possible 
to immediately settle accounts, too. 
[0164] 

Thereafter, when the digital contents reproducing device 
420 receives the rejection of the application of the user via 
the communication line P (s8), it outputs and displays data of 
an error message contained in the data of the rejection on the 
output section 422 (s9) . On the other hand, when the decryption 
keys cl, c2, the piece data d and the rental information are 
received via the communication line P (a8) , the predetermined 
flag is set, while the decryption keys cl, c2, the piece data 
d and the rental information are recorded on the memory section 
425 (slO) . At the same time, by using a clock function of the 
computer, a piece data transmission date and time is recorded 
on the auxiliary storage section 425. Then, the play list is 
read out on the main storage section 42 6 for updating, and is 
outputted and displayed on the output section 422 (si) . This 
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allows a file name of the contents file with the piece data d 

obtained to be displayed on the play list. 

[0165] 

Thereafter, when the reproducing operation of the contents 
file is performed based on the play list through the operation 
section 423 (s2) , the digital contents reproducing device 420 
reads out the reproduction information contained in the header 
information a relating to the relevant contents file on the 
recording medium for distribution a on the main storage section 
426, while it reads out the decryption key cl from the auxiliary 
storage section 425 and decrypts the relevant reproduction 
information by using the relevant decryption key cl . Then, by 
using the relevant reproduction information, the data body b 
on the recording medium for distribution a is sequentially read 
out by the decryption bit length on the main storage section 
42 6, and at the same time, the decryption key c2 is read out 
from the auxiliary storage section 42 5 on the main storage section 
426, Thereby, the relevant data on the main storage section 
426 is sequentially decrypted by the decryption bit length by 
using the decryption key c2 and the relevant data is sequentially 
returned from the compressed state to the original state through 
a filter of MPEG or the like, which reproduces the data body 
b (sll) . 
[0166] 

In conjunction with this processing at step 11, the 

94 



starting location information of the data body b is read out 
from the recording medium for distribution a on the main storage 
section 426, while the location information contained in the 
piece data d is read out from the auxiliary storage section 425 
on the main storage section 426, and the counting of a data length 
or a time from the relevant starting location information to 
the relevant location information is started (sl2) . Thereafter, 
whether or not the counting is finished is determined (sl3) . 
Thereby, the omitted part of the data body b is recognized. As 
a result of this determination, when it is determined that the 
counting has been finished and the omitted part of the data body 
b is recognized, if the bit length of the omitted data is smaller 
than the decryption bit length, the data body b is read out from 
the recording medium for distribution a and the omitted data 
contained in the piece data d is read out from the auxiliary 
storage section 425 on the main storage section 426 (namely, 

the data body b on the recording medium for distribution a and 
the omitted data on the auxiliary storage section 425 are 
transferred as the data of the decryption bit length) to be 
connected (sl4) . Then, the data of the decryption bit length 
on the relevant main storage section 426 is decrypted by using 
the decryption key c2 (sl5) and the relevant data is returned 
from the compressed state to the original state through the filter 
of the MPEG or the like {sl6), which reproduces the data body 
b (sl7) . 
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[0167] 

If the bit length of the omitted data is larger than the 
decryption bit length, the data body b is read out from the 
recording medium for distribution a and part of the omitted data 
contained in the piece data d is read out from the auxiliary 
storage section 425 on the main storage section 426 (namely, 
the data body b on the recording medium for distribution a and 
part of the omitted data on the auxiliary storage section 425 
are transferred as the data of the decryption bit length) to 
be connected, and subsequently the remaining omitted data 
contained in the piece data d (data of the decryption bit length) is 
readout from the auxiliary storage section 425 on the main storage 
section 426 (sl4) . Then, the data on the main storage section 
426 is decrypted by the decryption bit length by using the 
decryption key c2 (sl5) and the relevant data is returned from 
the compressed state to the original state through the filter 
of the MPEG or the like (sl6) , which reproduces the data body 
b (sl7) . 
[0168] 

Alternatively, part of the omitted data {data of the 
decryption bit length) contained in the piece data d is read 
out from the auxiliary storage section 425 on the main storage 
section 426, and subsequently, the data body b is read out from 
the recording medium for distribution a and the remaining omitted 
data contained in the piece data d is read out from the auxiliary 
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storage section 425 on the main storage section 42 6 to be connected 
(sl4) . Then, the data on the main storage section 426 is 
decrypted by the decryption bit length by using the decryption 
keyc2 (sl5) , and the relevant data is returned from the compressed 
state to the original state through the filter of MPEG or the 
like (sl6) , which reproduces the data body b (sl7) . In this 
manner, after the vicinity of the omitted part of the data body 
b is reproduced, again, the data body b on the recording medium 
for distribution a is read out on the main storage section 426, 
and is sequentially decrypted by the decryption bit length by 
using the decryption key c2 , and the relevant data is sequentially 
returned from the compressed state to the original state through 
the filter of MPEG or the like, which reproduces the subsequent 
data body b (sl8) . In the case where the bit length of the omitted 
data is more than or equal to twice as large as the decryption 
bits, the processing at step 14 is performed continuously. This 
reproduction software program is finished upon end processing 
by the user. 
[0169] 

Furthermore, the reproduction software, in addition to 
the above-described basic function, contains contents which are 
resident in the digital contents reproducing device 420 to manage 
the piece data d when the digital contents reproducing device 
420 is turned ON. In this contents, the piece data d on the 
auxiliary memory section 425 is managed, while a difference 
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between a piece data transmission data and time and a current 
date and time is obtained as an elapsed period from a time point 
when the piece data d is transmitted, and when this reaches the 
rental period contained in the rental information, it is 
determined to be outside of the rental period, and the piece 
data d and the decryption keys cl, c2 on the auxiliary storage 
section 425 are deleted, and the predetermined flag is hauled 
down. 
[0170] 

If the decryption key c2 is stolen and an attempt to 
illegally reproduce the data body b of the contents file on the 

recording medium for distribution a by using the computer 
(including the digital contents reproducing device 420) without 
obtaining the piece data d is made, the computer is made to perform 
the same processing of the reproduction software as that at step 
11 to thereby reproduce the data body b of the contents file 

on the recording medium for distribution a. At this time, when 
the data read out on the main storage section of the computer 
by the decryption bit length is data located before the omitted 
part, the stolen decryption key c2 which has been in advance 
recorded on an auxiliary storage section of another computer 
is read out on the main storage section, and the data on the 
main storage section is decrypted (namely, is subjected to a 
predetermined calculation) by the decryption bit length by using 
the decryption key c2 . Then, since it is decrypted by using 
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the stolen decryption key c2, the data on the main storage section 
can be sequentially converted into a data row before encryption 
by the decryption bit length. Consequently, after that, the 
data is returned from the compressed state to the original state 
through the filter of MPEG or the like, which can reproduce the 
data body b. 
[0171] 

However, when the data read out on the main storage section 
of the computer is data located after the omitted part, the 
decryption key c2 stolen from the auxiliary storage section of 
another computer is read out on the main storage section, the 
relevant data on the main storage section is decrypted (namely, 
is sub j ected to the predetermined calculation) by the decryption 
bit length by using the decryption key c2 . At this time, since 
the data row of the data on the main storage section is different 
from the data row after encryption (that is, the data row before 
omission) as shown in Fig. 15, it is converted into an unknown 
sequence of numbers or alphanumerics . When such unknown 
sequence of numbers or alphanumerics is passed through the filter 
of the MPEG or the like, the returning processing of the computer 
stops. This makes it impossible to reproduce the data of the 
data body b after the omitted part. 
[0172] 

In the digital contents illegal use preventing system 400 
as described above, the same effects as that of the illegal use 
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preventing system 100 can be obtained. 
[0173] 

In addition, in the digital contents illegal use preventing 
system400, after the databodybof thecontents file is compressed 
and encrypted, part of the relevant data body b is omitted and 
the data body b is recorded on the recording mediiam for 
distribution a with this omitted part closed so as to continue 
the data body b. Therefore, even if the decryption key c2 is 
stolen and thereby, the data body b is illegally reproduced by 
a computer or the like, when the data after omission of the data 
body b of the contents file on the recording mediiim for 
distribution a is read out on the main storage section of the 
computer by the decryption bit length and the relevant data is 
decrypted by the decryption bit length, the data is converted 
into unknown sequence of numbers or alphanumerics . When this 
unknown sequence of numbers or alphanumerics is passed through 
the filter of MPEG or the like, the returning processing stops, 
so that the data after the omitted part cannot be reproduced. 
Thus, in processing a large amount of data with equipment such 
as a computer, the data is read out on the main storage section 
of the equipment by the decryption bit length, and by making 
good use of the characteristic of the relevant equipment which 
decrypts and processes the data by the decryption bit length, 
the illegal reproduction of the data body b can be prevented. 
In addition, the data body b is recorded with the omitted part 
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closed so as to continue the data body b. Namely, since the 
data body b as described above is digital data and consists of 
only a continuous alphanumeric sequence, when the omitted part 
is closed so as to continue the data body b, the location of 
the relevant omitted part cannot be specified. Therefore, it 
is also difficult to specify the location of the relevant omitted 
part and reproduce the data before the omittedpart . Furthermore, 
if part of the data body b is omitted before encryption and the 
relevant omittedpart is filled with dummy data or remains omitted, 
in the case where the data body b is compressed by using MPEG, 
the data body b other than the omitted part can be reproduced 
with the stolen decryption key c2 . However, when part of the 
data body b is omitted after encryption and the omitted part 
is closed so as to continue the data body b, it becomes impossible 
to reproduce the data after the omitted part, which is very 
advantageous in preventing the illegal use of the data body b. 
[0174] 

As to the recording medium for distributiona in the digital 
contents illegal use preventing system 400, although the data 
body b is compressed and encrypted, and part of the relevant 
data body b is omitted and the data body b is recorded with the 
relevant omitted part closed so as to continue the data body 
b, whether or not the compression is performed is arbitrary. 
However, in the case where the compression is not performed, 
the data body b after the omitted part is reproduced as only 
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an unknown continuous sequence of niimbers or alphanumerics . 
AlthoughMPEG is exemplif iedas the compressing method, naturally, 
another form can be used. Furthermore, although the contents 
file is structured so as to have the head information a and the 
data body b, it is obviously possible to record it with other 
information added thereto. This other information includes a 
program by which it is determined whether or not the reproduction 
software has been installed in the computer of the user, and 
when it is determined that the software has not been installed, 
HP of the management center 410 is automatically accessed, and 
the like. When this program has been recorded and the user sets 
the recording medium for distribution a which he or she has in 
advance obtained in his or her computer (computer equivalent 
to the digital contents reproducing device 420, which is in a 
state that the reproduction software is not downloaded) , the 
WEB address of the management center 410 is read out, and based 
on this, the management center 410 is automatically accessed. 
Thereafter, the reproduction software can be obtained by the 
above-described procedure. 
[0175] 

While the location information is designed to be a data 
length or a time from the starting location information to the 
omitted part, it may be an address value indicating the omitted 
part or the like. In this case, it is sequentially determined 
whether or not an address value of the data body b on recording 
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medium for distribution a to be read out next and the location 
information coincide with each other, and as a result of the 
determination, when they are determined not to coincide with 
each other, the data body b on the recording medium for 

distribution a which the address value indicates is read out, 
while when they are determined to coincide with each other, the 
omitted data on the memory section 425 is read out, 
[0176] 

While the piece data d consists of the omitted data body 
and the location information, whether or not the location 
information is contained is arbitrary* In this case, for example, 
omitted location information indicating the omitted part is in 
advance recorded before the omitted part of the data body b, 
and the data body b is reproduced, and further counting is 
performed from the starting location information to the omitted 
location information. When this counting is finished, the 
omitted data on the auxiliary storage section 425 may be 
reproduced as the data of the relevant omitted part. 
Alternatively, a location of the omitted part of the data body 
b is predetermined, and the location information of the omitted 
data is prepared in the reproduction software. It is possible 
that the data body b is reproduced and at the same time, the 
omittedpart of the databodyb is recognizedbasedon this location 
information and the omitted data on the memory section 425 is 
reproduced as the data of the relevant omitted part. 
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[0177] 

The interruption program for user registration, the 
interruption program for reproduction software download and the 
interruption program for piece data delivery are only one example, 
and can be changed in design according to need. 
[0178] 

Furthermore, in the case where the contents file is 
recorded on the auxiliary storage section 425 of the digital 
contents reproducing device 420, after the rental period has 
passed, the contents file may be deleted together with the piece 
data d, or separately from the piece data d, an elapsed time 
from a point of time when the contents file is received is obtained 
and when the relevant elapsed time reaches a predeterminedperiod, 
the relevant contents file may be deleted. 
[0179] 

In the fourth embodiment, the system can also be changed 
in design so as to prevent illegal use of a contents file on 
the recording medium for distribution a not delivered on a rental 
basis but transferred to the user for pay or for free. In this 
case, advantages similar to the foregoing are also brought about . 
In the contents of the reproduction software used in this case, 
only the series of the processings when the delivered contents 
file is inside and outside of the rental period are deleted. 
With respect to the digital contents reproducing device, the 
reproduction software may not be downloaded from the management 
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center 410, but may be installed through a recording medium such 
as CD. Furthermore, obviously, the digital contents 
reproducing device is not a computer but can be a dedicated device, 
and any configuration can be used as long as the digital contents 
reproducing device has the function in which when a reproduction 
application for a contents file under the condition of 
authentication and billing is inputted by a user, the relevant 
application is transmitted to the management center 410 via the 
communication line p and thereafter when the piece data d is 
transmitted from the management center 410 via the communication 
line P, the data body b on the recording medium for distribution 
a is reproduced by using the header information on the recording 
medium for distribution a and the relevant piece data d at the 
time of reproducing operation. 

Embodiment 5 
[0180] 

Next, a fifth embodiment of the present invention is 
described with reference to the drawings. Fig. 17 is a 
configuration diagram of a digital contents illegal use 
preventing system relating to the fifth embodiment of the present 
invention, and Fig. 18 is a flowchart of reproduction software 
used for this system. 
[0181] 

A digital contents illegal use preventing system 500 as 
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shown in Fig. 17 has the same configuration as that of the illegal 
use preventing system 200. Different points are the 
configuration of the contents file and the contents of 
reproducing software recording on an auxiliary storage section 
525 of a digital contents reproducing device 520 (refer to Fig. 
18) . Hereinafter, the different points are described in detail, 
and a description of overlapping parts is omitted. 
[0182] 

In the contents file, similar to Embodiment 4, the header 
information a is recorded on a recording medium in a state that 
reproduction information contained in the relevant header 
information a is encrypted, while the data body b is compressed 
in a compressing method such as MPEG and is encrypted, and part 
of the relevant data body b is omitted, the relevant omitted 
part is closed so as to continue the data body b, and is recorded 
on a newly provided data body memory section (not shown) in a 
state that dummy data of the same bit length as the omitted part 
is added to the end thereof. Thereafter, the data body b on 
the data body memory section of the device for creating a recording 
medium for distribution 140 is transferred to a delivery 
management center 510 via the communication line P and is recorded 
on a digital contents DB 511 (auxiliary storage device) of the 
delivery management center 510 (electronic equipment) . The 
data body b may be recorded on a recording medium and be sent 
to the delivery management center 510 by mail to be read and 
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thereby recorded on the digital contents DB 511. 
[0183] 

The digital contents reproducing device 52 0 is a 
general-purpose computer used by a user. In the figure, 
reference numeral 521 denotes a control section such as CPU, 
reference numeral 522 denotes an output section such as a monitor 
and a speaker, reference numeral 523 denotes an operation section 
such as a keyboard and a mouse, reference numeral 524 denotes 
a reproduction and copy section reading/writing the data with 
respect to the recording medium and the like, reference numeral 
525 denotes an auxiliary storage section such as a hard disk, 
reference numeral 52 6 denotes a communication section for 
performing communication which is connected to the communication 

line P, and reference numeral 527 denotes a main storage section 

such as DRAM. 

[0184] 

On the auxiliary storage section 525, in addition to basic 
programs such as an operation system as a computer, the 
reproduction software as shown in Fig. 18 is recorded. The 
contents of the reproduction software will be described later. 
The processing of the relevant reproduction software on the main 
storage section 527 by the control section 521 allows a function 
to be exerted as the digital contents reproducing device 520 
in which the data body b recorded on the auxiliary storage section 
525 or the recording medium is sequentially transferred to the 
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main storage section 527 by the decryption bit length, the 
relevant data on the main storage section 527 is sequentially 
decrypted by the decryption bit length ( that is, decrypted by 
the decryption bit length) , and the relevant data is returned 
from a compressed state to an original state for reproduction 

(reading) . 

[0185] 

A description of a digital contents illegal use preventing 
method using the digital contents reproducing device 520 of the 
digital contents illegal use preventing system 500 configured 
as described above is given, and in conjunction of this, the 
operation of the delivery management center 510, the operation 
of the digital contents reproducing device 520, and the contents 
of respective programs are described. The decryption keys cl, 
c2 are recorded on a piece data DB 516 of the delivery management 
center 510. Hereinafter, for convenience, a case where one point 
of the data body b is omitted is described. 
[0186] 

In the digital contents reproducing device 52 0, the 
reproduction software is downloaded by the same procedure as 
that of Embodiment 2 and is recorded on the auxiliary storage 
section 525. Then, by the same procedure as that of Embodiment 
2, the contents file is downloaded from the digital contents 
DB 511 of the delivery management center 510 and is recorded 
on the auxiliary storage section 525. of the digital contents 
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reproducing device 520 or on the recording medium. 
[0187] 

Thereafter, when the reproduction software is executed 
by the user (in the case where the contents file is recorded 
on the recording medium, the reproduction software is executed 
and meanwhile, the relevant recording medium is set in a 
reproduction and copy section 524) , this digital contents 
reproducing device 520 outputs and displays the data such as 
a reproduction player and a play list contained in the relevant 
reproduction software on the output section 522 . Then, the play 
list is displayed on a screen of the relevant reproducing player 
(si) . On this play list, together with a file name of the 
downloaded contents file, whether or not the relevant contents 
file is being rented is indicated. Namely, the contents file 
having a predetermined flag hoisted, which indicates that a 
reproduction application has been made, is displayed. Then, 
based on this play list, whether or not reproducing operation 
has been performed for the contents file being rented is 
determined through the operation section 523 (s2) . 
[0188] 

If it is determined that the reproducing operation has 
not been performed, then it is determined whether or not 
reproduction application operation of the contents file not being 
rented which is displayed on the play list has been performed 
through the operation section 523 (s3) . As a result, if the 
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reproduction application operation has not been performed, then 
it is determined whether or not reading operation (operation 
of DISC LOAD) of the recording medium has been performed through 
the operation section 523 (s4) . When the operation of DISC LOAD 
is performed, a contents list showing a contents file on the 
recording medium which is not recorded on the play list (that 
is, downloaded on the recording medium with another computer 
or the like) is outputted and displayed on the output section 
522 (s5) - Namely, contents information contained in the header 
information a of the contents file with a predetermined flag 
not hoisted among the contents files on the recording medium 
is read out on the main storage section 527 and is displayed 
on the contents list. 
[0189] 

Thereafter, when an application for reproduction of the 
contents file not being rented on the play list or the contents 
file on the contents list is performed by the user (s3 or s6) , 
the contents information contained in the header information 
a of the relevant contents file on the auxiliary storage section 
525 or the recordingmedium is readout on the main storage section 
527. Then, based on a WEB address contained in the relevant 
contents information, a contents ID contained in the relevant 
contents information is transmitted to the delivery management 
center 510 via the communication line p. In this manner, the 
execution of the reproduction application is transmitted. 
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[0190] 

The management center 510 processes the interruption 
program for piece data delivery (refer to Fig. 9) . Then, the 
data necessary for the reproduction application processing is 
read out from the memory section 516 and is transmitted to the 
digital contents reproducing device 520 via the communication 
line P (s31) . Based on this data, the digital contents 
reproducing device 520 reads out the data of a reproduction 
application screen on the main* storage section 42 6 to output 
and display it on the output section 522 (s7) . 
[0191] 

Thereafter, when the user sequentially inputs or selects 
a rental period through the operation section 523 as displayed 
on the reproduction application screen (this determines a rental 
amount of money) , and finally inputs a user ID and a password 
through the operation section 523 as a reproduction application 
of the contents file (s8), the digital contents reproducing 
device 520 shifts the display output to an authentication screen, 
and meanwhile, transmits the inputted application data to the 
delivery management center 510 via the communication line p. 
At this time, the contents ID of the contents information on 
the auxiliary storage section 525 or on the recording medium 
and the player ID on the relevant auxiliary storage section 525 
are read out and transmitted to the delivery management center 
510 together with the application data (s9) . 
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[0192] 

Upon receiving the relevant application data or the like, 
the delivery management center 510 confirms the authentication 
of the user relating to the relevant application (s32) . Namely, 
with reference to the received user ID and player ID of the user, 
etc. , the user information of the relevant user is read out from 
a user information DB 514, and whether or not the relevant user 
is an authentic user is confirmed. At this time, the delivery 
management center 510 has in advance prepared a list of 
inappropriate persons with nonpayments of rental fee more than 
or equal to predetermined times or the like in the user information 
DB 514, and in addition to the authentication, confirms whether 
or not the user falls under the list of inappropriate persons 
(this confirmation of the list of inappropriate persons is 
arbitrary) . 
[0193] 

In the case where the delivery management center 510 has 
confirmed that the user relating to the application is an 
unauthentic user or an authentic user but a person who falls 
under the list of inappropriate persons, the rejection of the 
application of the user is rejected is transmitted to the digital 
contents reproducing device 520 via the communication line P 
{s33) . Then, the interruption program for piece data delivery 
is finished. 
[0194] 
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On the other hand, in the case where it has been confirmed 
that the user relating to the application is an authentic user 
and a person who does not fall under the list of inappropriate 
persons, with reference to the player ID of the user or the like, 
accounting is recorded on the user information of the user on 
the user information DB 514, while with reference to the contents 
ID, the piece data DB 516 is searched to read out the piece data 
d and the decryption keys cl, c2 corresponding to the relevant 
contents ID and to transmit them to the digital contents 
reproducing device 520 as a reply indicating that the application 
of the user is accepted together with the rental information 
indicating the rental period and the like which are contained 

in the application data via the communication line P (s34) . Then, 
the processing of the interrupt program for piece data delivery 
is finished. 
[0195] 

The accounting is charged to a bank/ credit card company 
530 or charged directly to the user, based on the user information 
DB 514 for every predetermined period and the user transfers 
the charge to an account or pays it in a convenience store or 
the like . Furthermore, in the case where the delivery management 
center 510 is connected to the bank/credit card company 530 via 
the communication line P, it is obviously possible to immediately 
settle accounts, too. 
[0196] 
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Thereafter, when the digital contents reproducing device 
520 receives the rejection of the application of the user via 

the communication line P (slO), it outputs and displays data 
of an error message contained in the data of the rejection on 
the output section 522 (sll) . 
[0197] 

On the other hand, when the piece data d, decryption keys 
cl, c2 and the rental information are received via the 
communication line 3 (slO) , the predetermined flag is hoisted, 
while the piece data d, the decryption keys cl, c2 and the rental 
information are recorded on the auxiliary storage section 525 
(sl2) . At the same time, by using a clock functionof the computer, 
a piece data transmission date and time is recorded on the 
auxiliary storage section 525. Then, the play list is updated 
and is outputted and displayed on the output section 522, which 
allows a file name of the contents file with the piece data d 
obtained to be displayed on the relevant play list (si) . 
[0198] 

Thereafter, when the reproducing operation of the contents 
file being rented is performed based on the play list through 
the operation section 523 (s2) , the digital contents reproducing 
device 520 reads out on the main storage section 527 the 
reproduction information contained in the header information 
a of the contents file on the auxiliary storage section 525 or 
on the recording medium, while it reads out the decryption key 
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cl from the auxiliary storage section 525 on the main storage 
section 527. Then, by using the relevant reproduction 
information, the data body b on the auxiliary storage section 
525 or on the recording medium is sequentially read out by the 
decryption bit length on the main storage section 527 and 
meanwhile, the decryption key c2 is read out from the auxiliary 
storage section 525 on the main storage section 527 . In addition, 
the relevant data on the main storage section 527 is decrypted 
by the decryption bit length by using the decryption key c2, 
and is returned from the compressed state to the original state 
through a filter of MPEG or the like, which reproduces the data 
body b (sl3) . 
[0199] 

Therewith, the starting location information of the data 
body b on the auxiliary storage section 525 or the recording 
medium is read out on the main storage section 527, while the 
starting location information contained in the piece data d on 
the auxiliary storage section 525 is read out on the main storage 
section 527, and the counting of a data length or a time from 
the starting location information to the location information 
is started (sl4) . Thereafter, whether or not the counting is 
finished is determined (sl5) . Thereby, the omitted part of the 
data body b is recognized. As a result of this determination, 
when it is determined that the counting has been finished and 
the omitted part of the data body b is recognized, if the bit 
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length of the omitted data is smaller than the decryption bit 
length, the data body b is read out from the auxiliary storage 
section 525 or the recordingmedium and the omitted data contained 
in the piece data d is read out from the auxiliary storage section 
525 on the main storage section 527 (namely, the data body b 
on the recording medium or the auxiliary storage section 525 
and the omitted data on the auxiliary storage section 525 are 
transferred as the data of the decryption bit length) to be 
connected (si 6) . Then, the data of the decryption bit length 
on the main storage section 527 is decrypted by using the 
decryption key c2 (sl7) and the relevant data is returned from 
the compressed state to the original state through the filter 
of the MPEG or the like (si 8) , which reproduces the data body 
b (sl9) . 
[0200] 

If the bit length of the omitted data is larger than the 
decryption bit length, the data body b is read out from the 
auxiliary storage section 525 or the recording medium and part 
of the omitted data contained in the piece data d is read out 
from the auxiliary storage section 52 5 on the main storage section 
527 (namely, the data body b on the recording medium for 

distribution a and part of the omitted data on the auxiliary 
storage section 525 are transferred as the data of the decryption 
bit length) to be connected, and subsequently the remaining 
omitted data contained in the piece data d (data of the decryption 
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bit length) is read out from the auxiliary storage section 525 
on the main storage section 527 {sl6) . Then, the data on the 
main storage section 527 is decryptedby the decryptionbit length 
by using the decryption key c2 (sl7) and the relevant data is 
returned from the compressed state to the original state through 
the filter of the MPEG or the like (sl8) , which reproduces the 
data body b (sl9) . 
[0201] 

Alternatively, part of the omitted data (data of the 
decryption bit length) contained in the piece data d is read 
out from the auxiliary storage section 525 on the main storage 
section 527, and subsequently, the data body b is read out from 
the auxiliary storage section 525 or the recording medium and 
the remaining omitted data contained in the piece data d is read 
out from the auxiliary storage section 525 on the main storage 
section 527 to be connected (sl6) . Then, the data on the main 
storage section 527 is decrypted by the decryption bit length 
by using the decryption key c2 (sl7) , and the relevant data is 
returned from the compressed state to the original state through 
the filter of MPEG or the like (sl8) , which reproduces the data 
body b (sl9) . In this manner, after the vicinity of the omitted 
part of the data body b is reproduced, again, the data body b 
on the auxiliary storage section 525 or the recording medium 
is read out on the main storage section 527, and is sequentially 
decrypted by the decryption bit length by using the decryption 
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key c2, and the relevant data is sequentially returned from the 
compressed state to the original state through the filter of 
MPEG or the like, which reproduces the subsequent data body b 

(s20) . In the case where the bit length of the omitted data 
is more than or equal to twice as large as the decryption bits, 
the processing at step 16 is performed continuously. This 
reproduction software program is finished upon end processing 
by the user. 

[0202] 

Furthermore, in addition to the above-described basic 
function, to the reproduction software, there are added contents 
which are resident in the digital contents reproducing device 
520 to manage the piece data d when the digital contents 
reproducing device 520 is turned ON. In this contents, the piece 
data d on the auxiliary storage section 525 is managed, while 
a difference between a piece data transmission data and time 
and a current date and time is obtained as an elapsed period 
from a time point when the piece data d is transmitted, and when 
this reaches the rental period contained in the rental 
information, it is determined to be outside of the rental period, 
and the piece data d and the decryption keys cl , c2 on the auxiliary 
storage section 525 are deleted, while the predetermined flag 
is hauled down. 
[0203] 

If the decryption key c2 is stolen and an attempt to 
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illegally reproduce the data body b of the contents file recorded 
on the auxiliary storage section of the relevant computer or 
the recording medium by using the computer (including the digital 
contents reproducing device 52 0) without obtaining the piece 
data d is made, the computer is made to perform the same processing 
of the reproduction software as that at step 13 to thereby 
reproduce the data body b of the contents file on the auxiliary 
storage section or on the recording mediiam. At this time, when 
the data read out on the main storage section of the computer 
by the decryption bit length is data located before the omitted 
part, the stolen decryption key c2 which has been in advance 
recorded on an auxiliary storage section of another computer 
is read out on the main storage section, and the data on the 
main storage section is decrypted (namely, is subjected to a 
predetermined calculation) by the decryption bit length by using 
the decryption key c2 . Then, since it is decrypted by using 
decryption key c2, the data can be converted into a data row 
before encryption. Consequently, after that, the data is 
returned from the compressed state to the original state through 
the filter of MPEG or the like, which can reproduce the data 
body b. 
[0204] 

However, when the data read out on the main storage section 
of the computer by the decryption bit length is data located 
after the omitted part, the decryption key c2 stolen from the 

119 



auxiliary storage section of another computer is read out on 
the main storage section, the relevant data on the main storage 
section is decrypted (namely, is subjected to the predetermined 
calculation) by the decryptionbit length by using the decryption 
key c2. At this time, since the data row of the data on the 
main storage section is different from the data row after 
encryption (that is, the data row before omission) (take over 
and refer to Fig. 15) , it is converted into an unknown sequence 
of numbers or alphanumerics • When these unknown sequence of 
numbers or alphanumerics is passed through the filter of the 
MPEG or the like, the returning processing of the above-mentioned 
another computer stops. This makes it impossible to reproduce 
the data of the data body b after the omitted part. 
[0205] 

In the digital contents illegal use preventing system 500 
as described above, the same effects as that of the illegal use 
preventing system 200 can be obtained. 
[0206] 

In addition, in the digital contents illegal use preventing 
systemSOO, after thedatabodybof the contents file is compressed 
and decrypted, part of the relevant data body b is omitted and 
the data body b is recorded on the auxiliary storage section 
or on the recording medium with this omitted part closed so as 
to continue the data body b. Therefore, even if the decryption 
key c2 is stolen and thereby, the data body b is illegally 
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reproduced by a computer or the like, when the data after omission 
of the data body b of the contents file on the auxiliary storage 
section or on the recording medium is read out on the main storage 
section of the computer by the decryption bit length and is 
decrypted by the decryption bit length, the data is converted 
into unknown sequence of numbers or alphanumerics . When this 
unknown sequence of numbers or alphanumerics is passed through 
the filter of MPEG or the like, the returning processing stops, 
so that the data after the omitted part cannot be reproduced. 
Thus, in processing a large amount of data with equipment such 
as a computer, by making good use of the characteristic of the 
relevant equipment in which the data is read out on the main 
storage section of the equipment by the decryption bit length 
to be processed, the illegal reproduction of the data body b 
can be prevented. In addition, the data body b is recorded with 
the omittedpart closed so as to continue the data body b. Namely, 
since the data body b as described above is digital data and 
consists of only a continuous alphanumeric sequence, when the 
omitted part is closed so as to continue the data body b, the 
location of the relevant omitted part cannot be specified. 
Therefore, it is also difficult to specify the location of the 
omitted part and reproduce the data before the omitted part. 
Furthermore, if part of the data body b is omitted before 
encryption and the omitted part is filled with dummy data or 
remains omitted, in the case where the data body b is compressed 
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by using MPEG, the data body b other than the omitted part can 
be reproduced with the stolen decryption key c2 . However, when 
part of the data body b is omitted after encryption and the omitted 
part is closed so as to continue the data body b, it becomes 
impossible to reproduce the data after omitted part, which is 
very advantageous in preventing the illegal use of the data body 
b. 

[0207] 

Although the data body b is compressed and encrypted in 
the digital contents DB 511, and part of the relevant data body 
b is omitted and the data body b is recorded with the relevant 
omitted part closed so as to continue the data body, whether 
or not the compression is performed is arbitrary. However, in 
the case where the compression is not performed, the data body 
b after the omitted part is reproduced as only an unknown 
continuous sequence of numbers or alphanumerics . Although MPEG 
is exemplified as the compressing method, naturally, another 
form can be used. Furthermore, although the contents file is 
structured so as to have the head information a and the data 
body b, it is obviously possible to record it with other 
information added thereto. This other information includes a 
program by which it is determined whether or not the reproduction 
software has been installed in the computer of the user, and 
when it is determined that the software has not been installed, 
HP of the delivery management center 510 is automatically 
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accessed, and the like. When this program has been recorded 
and the user attempts to execute the contents file which he or 
she has in advance obtained in his or her computer (computer 
equivalent to the digital contents reproducing device 520, which 
is in a state that the reproduction software is not downloaded) , 
the WEB address of the delivery management center 510 is read 
out, andbasedon this, the management center 510 is automatically 
accessed. Thereafter, the reproduction software can be 
obtained by the above-described procedure. 
[0208] 

While the location information is designed to be a data 
length or a time from the starting location information to the 
omitted part, it may be an address value indicating the omitted 
part or the like. In this case, it is sequentially determined 
whether or not an address value of the data body b on recording 
medium for distribution a to be read out next and the location 
information coincide with each other, and as a result of the 
determination, when they are determined not to coincide with 
each other, the data body b on the auxiliary storage section 
or on the recording medium which the address value indicates 
is read out, while when they are determined to coincide with 
each other, the omitted data on the auxiliary storage section 
525 is read out. 
[0209] 

While the piece data d consists of the omitted data body 
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and the location information, whether or not the location 
information is contained is arbitrary. In this case, for example, 
omitted location information indicating the omitted part is in 
advance recorded before the omitted part of the data body b, 
and the data body b is reproduced, and further counting is 
performed from the starting location information to the omitted 
location information. When this counting is finished, the 
omitted data on the auxiliary storage section 525 may be 
reproduced as the data of the relevant omitted part. 
Alternatively, a location of the omitted part of the data body 
b is predetermined, and the location information of the omitted 
data is prepared in the reproduction software. It is possible 
that the data body b is reproduced and at the same time, the 
omittedpart of the data body b is recognizedbasedon this location 
information and the omitted data on the auxiliary storage section 
525 is reproduced as the data of the relevant omitted part. 
[0210] 

The interruption program for user registration, the 
interruption program for reproduction software download and the 
interruption program for piece data delivery are only one example, 
and can be changed in design according to need. 
[0211] 

It goes without saying that this data illegal use 
preventing method and the programs can be applied to the digital 
contents reproducing device 320 of Embodiment 3. 
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[0212] 

Furthermore, in the case where the contents file is 
recorded on the auxiliary storage section 525 of the digital 
contents reproducing device 520, after the rental period has 
passed, the contents file may be deleted together with the piece 
data d, or separately from the piece data d, an elapsed time 
from a point of time when the contents file is received is obtained 
and when the relevant elapsed time reaches a predeterminedperiod, 
the relevant contents file may be deleted. 
[0213] 

In the fifth embodiment, the system can also be changed 
in design so as to prevent illegal use of a contents file not 
delivered on a rental basis but transferred for pay or for free. 
In this case, advantages similar to the foregoing are also brought 
about. In the contents of the reproduction software used in 
this case, only the processing when the delivered contents file 
is outside of the rental period is deleted. With respect to 
the digital contents reproducing device 520, the reproduction 
software may not be downloaded from the delivery management 
center 510, but may be installed through a recording medium such 
as CD. Furthermore, obviously, the digital contents 
reproducing device is not a computer but canbe a dedicated device . 
[0214] 

In the above-described embodiments, although the method 
for processing the data body b of the digital contents is described, 
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in the processing method of the data which is encrypted and 
decrypted by the decryption bit length, thereby being read, any 
data can be processed as long as the data is encrypted, part 
of a bit length different from the decryption bit length of this 
data is omitted, and the omitted part is closed to continue the 
relevant data. With respect to the equipment for processing 
the data, any equipment may be used as long as it can realize 
a function similar to that of the device for creating a recording 
medium for distribution 140. For example, the above-mentioned 
method can be used for a data reading device which is a computer 
to. process the data. 
[0215] 

Furthermore, this data processing method is available as 
a method for preventing the illegal use of transmitted and 
received data. In this case, a digital contents reproducing 
device only needs to be a data reading device which can read 
the data, a management center and a delivery management center 
only needs to be electronic equipment which is connected to the 
data reading device via a communication line, and has an auxiliary 
storage device recording the omitted data. The electronic 
equipment is a concept including a data reading device. 
Specifically, in transmitting the data recorded on the auxiliary 
storage section of the data reading device, the data is encrypted, 
at least part of the relevant data is omitted, and the relevant 
omitted part is closed to continue the data, and the relevant 
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data is recorded on the auxiliary storage section of the data 
reading device, while the omitted data is recorded on the 
auxiliary storage section together with location information 
indicating in which part of the data the relevant omitted part 
is located. Thereafter, the data reading device is made to 
transmit the data on the auxiliary storage section to the 
electronic equipment, while the omitted data, the location 
information and a decryption key are transmitted to the 
above-mentioned other data reading device separately from the 
data. This enables the data to securely be transmitted to the 
other data reading device. If the data and the encryption key 
are stolen, reading is disabled unless the omitted data and the 
location information are obtained, which can prevent the illegal 
use of the data. It goes without saying that the omitted data 
and location information are desirably transmitted separately 
from the decryption key. 
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